Analysis
-
max time kernel
152s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-es -
resource tags
arch:x64arch:x86image:win10v2004-20231215-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
11-01-2024 20:32
Behavioral task
behavioral1
Sample
C40207-1910.exe
Resource
win7-20231215-es
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
C40207-1910.exe
Resource
win10v2004-20231215-es
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
_.exe
Resource
win7-20231215-es
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
_.exe
Resource
win10v2004-20231215-es
2 signatures
150 seconds
General
-
Target
_.exe
-
Size
1.3MB
-
MD5
4dce9a0afd4a43f7a21896f50aa2b442
-
SHA1
f915dad6ebd4276518f7d962619a3c4612b76be0
-
SHA256
e939a53fe11b0d32d9ee617f92d48fc4b409516d5c5ecfe4599a6c64d7fb1241
-
SHA512
daf5a5e4b0601f8f0b29f8292b659be41a79d7045fe0b9ffa8b71df966aac01ef5d29bcec2be4aee233926976f8708f6bb86f4639e4ee08368ac9909bfac7290
-
SSDEEP
24576:lDlfF9pRxwExoc7pZtSDBPNqig4ON4+xJX7YRk:nFDRx7V7pEPHpON4qJX7V
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/4312-0-0x0000000000910000-0x0000000000CF2000-memory.dmp upx behavioral4/memory/4312-1-0x0000000000910000-0x0000000000CF2000-memory.dmp upx behavioral4/memory/4312-2-0x0000000000910000-0x0000000000CF2000-memory.dmp upx behavioral4/memory/4312-6-0x0000000000910000-0x0000000000CF2000-memory.dmp upx behavioral4/memory/4312-8-0x0000000000910000-0x0000000000CF2000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4312 _.exe 4312 _.exe 4312 _.exe 4312 _.exe