Analysis
-
max time kernel
3s -
max time network
116s -
platform
windows7_x64 -
resource
win7-20231215-es -
resource tags
arch:x64arch:x86image:win7-20231215-eslocale:es-esos:windows7-x64systemwindows -
submitted
11-01-2024 20:32
Behavioral task
behavioral1
Sample
C40207-1910.exe
Resource
win7-20231215-es
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
C40207-1910.exe
Resource
win10v2004-20231215-es
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
_.exe
Resource
win7-20231215-es
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
_.exe
Resource
win10v2004-20231215-es
2 signatures
150 seconds
General
-
Target
_.exe
-
Size
1.3MB
-
MD5
4dce9a0afd4a43f7a21896f50aa2b442
-
SHA1
f915dad6ebd4276518f7d962619a3c4612b76be0
-
SHA256
e939a53fe11b0d32d9ee617f92d48fc4b409516d5c5ecfe4599a6c64d7fb1241
-
SHA512
daf5a5e4b0601f8f0b29f8292b659be41a79d7045fe0b9ffa8b71df966aac01ef5d29bcec2be4aee233926976f8708f6bb86f4639e4ee08368ac9909bfac7290
-
SSDEEP
24576:lDlfF9pRxwExoc7pZtSDBPNqig4ON4+xJX7YRk:nFDRx7V7pEPHpON4qJX7V
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral3/memory/764-0-0x00000000003D0000-0x00000000007B2000-memory.dmp upx -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main _.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 764 _.exe 764 _.exe 764 _.exe 764 _.exe