Analysis
-
max time kernel
149s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
04/02/2024, 03:07
Behavioral task
behavioral1
Sample
8e1013dc08f3bbad9e7d2e8d8954b125.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8e1013dc08f3bbad9e7d2e8d8954b125.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
8e1013dc08f3bbad9e7d2e8d8954b125.exe
-
Size
2.3MB
-
MD5
8e1013dc08f3bbad9e7d2e8d8954b125
-
SHA1
b65a19499b334b266727a3cbf96b78dd6631ae09
-
SHA256
29bff503489a07f2b46c0b38ad8a0284a845c092633a4efafdfa24622039ea4c
-
SHA512
8c1eaf709ed981be002815f0a093ba3907d2680b6f0d888ae4773022ffedabf49a0dadfa491e78229f129beeda29bb0ac03caa6fade3674b06d51e6c2556d5e5
-
SSDEEP
24576:EhCfyLfoVQyRovX49Cfs7ZW7qqUrxIGt12deT+Ll5GRB5Cp3vU:EYa4rNIrpUrnT2lbp
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2052-0-0x0000000000400000-0x0000000000645000-memory.dmp upx behavioral1/memory/2052-1-0x0000000000400000-0x0000000000645000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe 2052 8e1013dc08f3bbad9e7d2e8d8954b125.exe