Analysis
-
max time kernel
147s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11-01-2024 12:58
Behavioral task
behavioral1
Sample
gsrhs_ips.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
gsrhs_ips.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
gsrhs_main.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
gsrhs_main.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
gsrhs_romeditor.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
gsrhs_romeditor.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
gsrhs_sklockon.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
gsrhs_sklockon.exe
Resource
win10v2004-20231215-en
General
-
Target
gsrhs_romeditor.exe
-
Size
94KB
-
MD5
90daeaba98fc04b2d79aa0a019b1c508
-
SHA1
96e6578a9b0ac6ccb8a95e607bee47e2ba619ae0
-
SHA256
ff34d94acd69f0d3e4654f1d63cb4f38f1b3e9813d699db15a06f7264ca91bbe
-
SHA512
d2d27f320610c961253fdffc2f02b3095e8d429641ba5310ec9ab0922c7277760a18d5c780bec1b59e79bedeac3f4955f8f84eae679e4079c3b1317e01afde05
-
SSDEEP
1536:mjLCu3qXu65+MDUY8m0bNUn6Bc4Q7Ti9W5CtfKz93Ej7OqoBduXLs7/x:5fu65BUw0bNG6NsOntfc90uqoKLs/x
Malware Config
Signatures
-
resource yara_rule behavioral6/memory/4660-0-0x0000000000400000-0x0000000000453000-memory.dmp upx behavioral6/memory/4660-2-0x0000000000400000-0x0000000000453000-memory.dmp upx behavioral6/memory/4660-4-0x0000000000400000-0x0000000000453000-memory.dmp upx behavioral6/memory/4660-5-0x0000000000400000-0x0000000000453000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4660 gsrhs_romeditor.exe