Analysis
- max time kernel
146s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
28/02/2024, 13:02
Behavioral task
behavioral1
Sample
abf1304c9ca4afb9a0b378970be9264c.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
abf1304c9ca4afb9a0b378970be9264c.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
- Target abf1304c9ca4afb9a0b378970be9264c.exe
- Size 10KB
- Sample240228-p92wxacb95
- SHA256 15feff4ce7c106b80b7cbf3a3f30ab9a88d8ff4b36fbfb5fbb3f1f1b55f9895c
- MD5 abf1304c9ca4afb9a0b378970be9264c
- SHA1 7c72f6cb43476832cd835c76dad7ebfa16ae67ad
- SHA512 e98c7942d0357b36bee0339e3bbe1ae0952af339cf7136b5052fd41921801a3ee2ce9ad4c7edbf68e3df26073e36a76d44f0fa3dfce952118ea29ac60340736d
- SSDEEP 192:P19byTqmZIyeEtkvPHBj0jEbdeQbjiEw/+BIRgMArd:PrbyTwyeEyeUeQfG2Brx
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1604-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral2/memory/1604-1-0x0000000000400000-0x000000000040B000-memory.dmp upx - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1604 abf1304c9ca4afb9a0b378970be9264c.exe 1604 abf1304c9ca4afb9a0b378970be9264c.exe