Analysis
-
max time kernel
133s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
04-05-2024 20:18
Static task
static1
Behavioral task
behavioral1
Sample
27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe
Resource
win10v2004-20240419-en
General
-
Target
27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe
-
Size
7.2MB
-
MD5
17f2c6639488273ae39eaaaefc9ac922
-
SHA1
c22f42e0a920fffbaf5b4f27fae1c41cdab0ec7b
-
SHA256
27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48
-
SHA512
64b3eb517fa4e86c29c8ae04330d316ee18145cdcbc8b03968456e757bd12880edc1aef70690380d5b069966478089ad127ef059a2ff66d6d225b50f72340fe6
-
SSDEEP
196608:mJAhrFpjSnhchpwaoUy9uUdfSCpmiADei6Z8xs2u:6AhrqhcBoUmdd6MmiYei6Z32
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2100 27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe 2100 27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2100 27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe 2100 27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe 2100 27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe 2100 27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe"C:\Users\Admin\AppData\Local\Temp\27a6a54b8517f0e275805794f4da5a2ea181afc77d5f511ed77f9543d22e5d48.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2100