Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11-01-2024 12:58
Behavioral task
behavioral1
Sample
gsrhs_ips.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
gsrhs_ips.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
gsrhs_main.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
gsrhs_main.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
gsrhs_romeditor.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
gsrhs_romeditor.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
gsrhs_sklockon.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
gsrhs_sklockon.exe
Resource
win10v2004-20231215-en
General
-
Target
gsrhs_sklockon.exe
-
Size
159KB
-
MD5
6a7e00988dec973623718843232e7779
-
SHA1
f06a200a7b673f674257bf8d384507a7c4bb073d
-
SHA256
dca471fbb940a5e89d331fd56f1aec02f27da5a648a7d3983b605bb750d6d8b1
-
SHA512
674446ffcc913796367457e2c526998f27b7048b7df6363e734c075a3121672430de9a92a5a5e9b5378dd42330abca542d198ee5173ea8f5b3a038cd51e4deeb
-
SSDEEP
3072:09YWGTHibkxMywJ+91Ra+Tb0b2zekN9TMx67s3zqeF7qsm:0CzEn+9aybB5NG4MWgqZ
Malware Config
Signatures
-
resource yara_rule behavioral8/memory/3332-0-0x0000000000400000-0x0000000000456000-memory.dmp upx behavioral8/memory/3332-3-0x0000000000400000-0x0000000000456000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3332 gsrhs_sklockon.exe