Overview
overview
3Static
static
385812383/T...eys.js
windows7-x64
185812383/T...eys.js
windows10-2004-x64
185812383/T...ers.js
windows7-x64
185812383/T...ers.js
windows10-2004-x64
185812383/b...SI.dll
windows7-x64
185812383/b...SI.dll
windows10-2004-x64
185812383/b...ll.dll
windows7-x64
185812383/b...ll.dll
windows10-2004-x64
185812383/b...ok.dll
windows7-x64
185812383/b...ok.dll
windows10-2004-x64
185812383/b...ys.exe
windows7-x64
185812383/b...ys.exe
windows10-2004-x64
185812383/b...xe.exe
windows7-x64
185812383/b...xe.exe
windows10-2004-x64
1Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 11:49
Static task
static1
Behavioral task
behavioral1
Sample
85812383/TrapKeys/TrapKeys.js
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85812383/TrapKeys/TrapKeys.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
85812383/TrapKeys/Wrappers.js
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
85812383/TrapKeys/Wrappers.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
85812383/bin/Release/HookNTQSI.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
85812383/bin/Release/HookNTQSI.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
85812383/bin/Release/RemoteDll.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
85812383/bin/Release/RemoteDll.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
85812383/bin/Release/TaskKeyHook.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
85812383/bin/Release/TaskKeyHook.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
85812383/bin/Release/TrapKeys.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
85812383/bin/Release/TrapKeys.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
85812383/bin/Release/remoteExe.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
85812383/bin/Release/remoteExe.exe
Resource
win10v2004-20231222-en
General
-
Target
85812383/bin/Release/remoteExe.exe
-
Size
24KB
-
MD5
f43dcbe62995a81b47f90b357452a00e
-
SHA1
d250f2048a4bb4a62a49b2b91660634939429498
-
SHA256
aca9223011ab3eede85aa6bb8290e39fad1712ce8292b3b619784fe8bdd5c35c
-
SHA512
de18d51fa11975140211c241d9a10fd36b321cdd6173054118457e2a8d4a69b998321caf21b2ed65190c09ecc18f20cb16f711dffb16ab0fee320fcc5464099c
-
SSDEEP
192:bCvN2Yc6iMGrTRu+kSNYhmgjf/I/7GI/7QP1oyn85p4vifraXK1P:Y2YcEGRu2NEmtJG1m5p46f11P
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4328 remoteExe.exe 4328 remoteExe.exe