Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
18/01/2024, 19:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
65e56ce3447d1ce9b8d4ae8252e0cfd7.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
65e56ce3447d1ce9b8d4ae8252e0cfd7.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
65e56ce3447d1ce9b8d4ae8252e0cfd7.exe
-
Size
147KB
-
MD5
65e56ce3447d1ce9b8d4ae8252e0cfd7
-
SHA1
aef679ff6f4dd9c10cd894debd10a2c7fddd44a4
-
SHA256
4cfec29183b826961f7e1ce27b8920fe6b797190fc22a1b0deeb409dc4f47fe1
-
SHA512
37506e913feef564aefdd0eb7dc986642f76789811857ce6a3bbe39c355f106c078a2555d068c7215a800f6a78e39dba3e1a57923c9f2faaf59b87dceb3ffd94
-
SSDEEP
3072:ucldTVjzVNGEmgdxq2p7HZECtb73IwN6CrVkJUVy5ztcpc:uc9jzVAWxqY75Ewb7xJXy5ROc
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\MsnExec.exe 65e56ce3447d1ce9b8d4ae8252e0cfd7.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2372 65e56ce3447d1ce9b8d4ae8252e0cfd7.exe