Analysis
- max time kernel
143s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
25/01/2024, 16:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74ef79a1b72e3a42243db03e09768c89.exe
Resource
win7-20231215-en
2 signatures
150 seconds
General
- Target 74ef79a1b72e3a42243db03e09768c89.exe
- Size 869KB
- Sample240125-tle5fsbbhq
- SHA256 7fced7a1c4888cc3bdf9cdc1cc8a54e6c4a7165cb19312f1da761d4e3db69691
- MD5 74ef79a1b72e3a42243db03e09768c89
- SHA1 cdc69d960a99d3f21c3eebfde3f3290d51f8056d
- SHA512 a4a78b2fa48075a5058aea50279aa96542a5fefd94dfb6bdd04436e7f50a5b31a30bff4ffcb472a3881a993ca25b07594dec0580644d24d7cf0967c97810df92
- SSDEEP 24576:p72x+OSa0eVkM8kTXBghG0dyMJttDMMMMMMi:p72hp0eVb5qh9dhMMMMMMi
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Drops file in Drivers directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\drivers\lsass.exe 74ef79a1b72e3a42243db03e09768c89.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4240 74ef79a1b72e3a42243db03e09768c89.exe 4240 74ef79a1b72e3a42243db03e09768c89.exe