Analysis
-
max time kernel
147s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
07-01-2024 16:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
497786f2c96182c528e121edf912e8ae.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
497786f2c96182c528e121edf912e8ae.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
497786f2c96182c528e121edf912e8ae.exe
-
Size
685KB
-
MD5
497786f2c96182c528e121edf912e8ae
-
SHA1
2c0554b54efd9ebddcd5111f87e1c7154e268dc5
-
SHA256
0a4490bb94661337da87f9d367feb0238417bc5d32158a2972860a430130206f
-
SHA512
2e6b45bb3f6ad5ac6d805c4c057d2eccd99971d56946f4b452a73041edd03eb566b1facd23307cac6f2320f68c85964fbeec20cbf17af833be91a0db5eb88a6c
-
SSDEEP
12288:xxETQAH7uKThTN7o0wzPlHu11bJWYpAdFzWgwy0PpQF5EEN5UJh9cFOa8pAmf:xxETQ47u8TGloPWYGdFqVhQjj5UZc3af
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2196 497786f2c96182c528e121edf912e8ae.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe -
Suspicious use of SetWindowsHookEx 10 IoCs
pid Process 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe 2196 497786f2c96182c528e121edf912e8ae.exe