Analysis
-
max time kernel
141s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16-05-2024 00:06
Behavioral task
behavioral1
Sample
7ffa7d9e8dfade3a2a303af081c1f15e6c93b82b7916bb4103343ddf6bfef8b6.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7ffa7d9e8dfade3a2a303af081c1f15e6c93b82b7916bb4103343ddf6bfef8b6.exe
Resource
win10v2004-20240508-en
General
-
Target
7ffa7d9e8dfade3a2a303af081c1f15e6c93b82b7916bb4103343ddf6bfef8b6.exe
-
Size
1.7MB
-
MD5
4e50a37b2cc40c515554218518c21032
-
SHA1
4bada9f8392bccfa050afe609c8cef9317fea411
-
SHA256
7ffa7d9e8dfade3a2a303af081c1f15e6c93b82b7916bb4103343ddf6bfef8b6
-
SHA512
27bfdd9d482c0214e9c911cba242d87f6ec850ad86fc1b9ea44de95b94cce5074af3c9fdc615a0d1da0e37c63d7797402a8effd41fca9bdd65b987b7a8685ca5
-
SSDEEP
24576:uPd+dEW1pe+usy3F68DENiQmpnjIMYCti9Gp42O5y8pDGTKuMHpRFu1hcusJea7A:2dOEUjuvF6H8gMZiL2O8VvAR01Bg+V
Malware Config
Signatures
-
Detects executables packed with ASPack 8 IoCs
resource yara_rule behavioral2/memory/4152-0-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/4152-4-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/4152-5-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/4152-3-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/4152-2-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/4152-1-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/4152-7-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack behavioral2/memory/4152-8-0x0000000000400000-0x0000000000908000-memory.dmp INDICATOR_EXE_Packed_ASPack -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4152 7ffa7d9e8dfade3a2a303af081c1f15e6c93b82b7916bb4103343ddf6bfef8b6.exe