Analysis
- max time kernel
142s - max time network
114s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system - submitted
16/04/2024, 07:42
Behavioral task
behavioral1
Sample
2528-10-0x0000000000400000-0x0000000000475000-memory.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2528-10-0x0000000000400000-0x0000000000475000-memory.exe
Resource
win10v2004-20240412-en
2 signatures
150 seconds
General
- Target 2528-10-0x0000000000400000-0x0000000000475000-memory.exe
- Size 468KB
- Sample240416-jjrelacf33
- SHA256 c065918791578b17c5bb1b56e7bde0003b7fcea3710f29a44c9beb31c8d0dea5
- MD5 b50efd6ef888b46adcc6ac4c815b89b4
- SHA1 6e00b4f847a083e4a4d0418d900ff90a86e25090
- SHA512 ee1dd2becbd9f9de4e6cd55a3374501dc0afc4ea497f8cfa00b5d731846933b5f3ddc863b54129201dca6f2c4f0002ecca99472692788765da5f9910687d9961
- SSDEEP 6144:K4ry4wS1L3k4zDFy9uCDKSEjLGA1Lf4TVy9+uE6/N90rm1E9XW:rry4BL3JDFy9uCDK7KYqVyIC
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 376 2528-10-0x0000000000400000-0x0000000000475000-memory.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 376 2528-10-0x0000000000400000-0x0000000000475000-memory.exe