Resubmissions
05/04/2024, 00:14
240405-ajma7sfc36 3Analysis
-
max time kernel
24s -
max time network
17s -
platform
windows10-1703_x64 -
resource
win10-20240404-es -
resource tags
arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows -
submitted
05/04/2024, 00:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FilterKeysSetter.exe
Resource
win10-20240404-es
1 signatures
150 seconds
General
-
Target
FilterKeysSetter.exe
-
Size
164KB
-
MD5
154be5241fcfd60a6d87d955df5efa6d
-
SHA1
352cd9b336eeee3c70f402951e352788e771079b
-
SHA256
08594a3e6ddf07d21f1f8392574ecef0c80e2d8b18cfea9f791eaf5977df0ccb
-
SHA512
555c275dac1446d9f116f0e32b401a59c7bca5e4daf75e74e2648d3ffc3a5924317cbf3326ff577b822537211261e6f5096432fa4eb357e646c5e939af9ac7dd
-
SSDEEP
3072:K0Bv919g/6/vy1m4NPF+fUOMd9hIwXm250leRW11D:fRHwyUHVF9d9hIwnNW
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2148 FilterKeysSetter.exe 2148 FilterKeysSetter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\FilterKeysSetter.exe"C:\Users\Admin\AppData\Local\Temp\FilterKeysSetter.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2148
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3996