Analysis
-
max time kernel
4s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 12:10
Behavioral task
behavioral1
Sample
5085da935ff572836ec7d5fc0bbd1023.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5085da935ff572836ec7d5fc0bbd1023.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
5085da935ff572836ec7d5fc0bbd1023.exe
-
Size
720KB
-
MD5
5085da935ff572836ec7d5fc0bbd1023
-
SHA1
989d5edf8a78fb6a9389d0b6dce4448a3c162e41
-
SHA256
e7e5dff900f8181ef021db1e578be2dbee015bacfedd71f882e9640e15acb42e
-
SHA512
c0b1b6460aa3c286163efe3e41691ccb4554f6f8b28fbdd48b3547ab351c749e69789f218d58e5dd3839432a726eee59560e4ef73a3a7107e352ecce1017c458
-
SSDEEP
12288:0UR50GBVb49z61acqrNN/XidAGem9xRG1eujPG20sQnewJZCSxi2mLh8:0o50OX1afv/Xvm9xRG1e++20HXJZbxiY
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2340-0-0x0000000000400000-0x000000000064A000-memory.dmp vmprotect behavioral1/memory/2340-1-0x0000000000400000-0x000000000064A000-memory.dmp vmprotect behavioral1/memory/2340-15-0x0000000000400000-0x000000000064A000-memory.dmp vmprotect -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2340 5085da935ff572836ec7d5fc0bbd1023.exe 2340 5085da935ff572836ec7d5fc0bbd1023.exe 2340 5085da935ff572836ec7d5fc0bbd1023.exe 2340 5085da935ff572836ec7d5fc0bbd1023.exe