Overview
overview
3Static
static
385812383/T...eys.js
windows7-x64
185812383/T...eys.js
windows10-2004-x64
185812383/T...ers.js
windows7-x64
185812383/T...ers.js
windows10-2004-x64
185812383/b...SI.dll
windows7-x64
185812383/b...SI.dll
windows10-2004-x64
185812383/b...ll.dll
windows7-x64
185812383/b...ll.dll
windows10-2004-x64
185812383/b...ok.dll
windows7-x64
185812383/b...ok.dll
windows10-2004-x64
185812383/b...ys.exe
windows7-x64
185812383/b...ys.exe
windows10-2004-x64
185812383/b...xe.exe
windows7-x64
185812383/b...xe.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 11:49
Static task
static1
Behavioral task
behavioral1
Sample
85812383/TrapKeys/TrapKeys.js
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85812383/TrapKeys/TrapKeys.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
85812383/TrapKeys/Wrappers.js
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
85812383/TrapKeys/Wrappers.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
85812383/bin/Release/HookNTQSI.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
85812383/bin/Release/HookNTQSI.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
85812383/bin/Release/RemoteDll.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
85812383/bin/Release/RemoteDll.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
85812383/bin/Release/TaskKeyHook.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
85812383/bin/Release/TaskKeyHook.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
85812383/bin/Release/TrapKeys.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
85812383/bin/Release/TrapKeys.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
85812383/bin/Release/remoteExe.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
85812383/bin/Release/remoteExe.exe
Resource
win10v2004-20231222-en
General
-
Target
85812383/bin/Release/TrapKeys.exe
-
Size
56KB
-
MD5
fe952bcb96c225a8ec48e73af9f1adb0
-
SHA1
50d8ba07981c89efb9760d517bd1e3984223c197
-
SHA256
34f242fb8caf5c5960d6143523bfd720d1cda3cd9a22dc1e468cfb3ba86ec79c
-
SHA512
f31bbfd23b5bd05b9f41eccf10c0ab94d6b800b5b65555cba8a15621afebef8eb4bd658c40e1bc07b5bb69b98a62ae86429ee3120fa277949d7ebadd9d9b538e
-
SSDEEP
768:Luc4eZoY0B7LuEnD52V3/FdPjMlx0Hbbmd:gN7Lm7r/Hfi
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 884 TrapKeys.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 884 TrapKeys.exe