Analysis
-
max time kernel
147s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 22:53
Static task
static1
Behavioral task
behavioral1
Sample
17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe
Resource
win10v2004-20231222-en
General
-
Target
17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe
-
Size
8.5MB
-
MD5
cfa85d9a85f1f8208b126ee3b063453b
-
SHA1
4db9e1c8a5e98added5942d2f391d62cfa6e3442
-
SHA256
17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb
-
SHA512
6a2d7e4fde64f53a46d70fd620508e91708c9aacc05faa52b9c115c5a95793aed5d3aa036856d19dee8f50467aaa3d536bc1166c56f4e4b2aeb9d03128f2372a
-
SSDEEP
196608:LBSXXmCuUpLm/HGa8Pl17jOSRvSx03NJPrNP:9uXAUZmO1Pz7j9qiN9h
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2860 17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe 2860 17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe 2860 17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe 2860 17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2860 17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe 2860 17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe"C:\Users\Admin\AppData\Local\Temp\17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2860