Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27-04-2024 00:16
Static task
static1
Behavioral task
behavioral1
Sample
c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe
Resource
win10v2004-20240419-en
General
-
Target
c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe
-
Size
2.2MB
-
MD5
3bbc9d7c1abcc08b6a06be2368af13d4
-
SHA1
ce030bf143c56fd67c9802a28e971999d9513c06
-
SHA256
c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275
-
SHA512
dd3fe518a0cb5b340870f76fb45f54b3e28cf6c1be246b7bd425752a9247af479c8c95de21dda8aa820ab7ef941186513e0f1d649d3d813be7cf6846ca528301
-
SSDEEP
49152:RubAFzNNhMl+x7lN/Tfh3jzL7e1oyUUZfLliFNtWSPOSOtxceE5L0qMur:YbyBNhMAxX7fh3jzLa1oyUUZfLliFNt1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2684 c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2684 c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe 2684 c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe"C:\Users\Admin\AppData\Local\Temp\c21b0d849a07ae75c5e959053ee3683a60dd0b7cf69193ae1968631ad73cc275.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2684