Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20-05-2024 17:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
General
-
Target
992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe
-
Size
280KB
-
MD5
592ec0af016e173c46dfd1636bb99ad7
-
SHA1
555d8de445852c67ae69dee7c1ddda750bb27316
-
SHA256
992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f
-
SHA512
938b5d2f0c7f8ea3cb26372c719a169fca0e30e5b43ce0f09a66a1cc354ce672fc9795470214e82df0f4b23fd0d07b0eca38767b687dd0fbbd264be7188ba45a
-
SSDEEP
6144:xnC1Xm2LQJEumPvf9Yik7vDyObWO9feEzqnedNBIal9J+:xC1Xm+QJEIy8WEzqM
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes:
992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exepid process 1796 992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe 1796 992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe 1796 992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe 1796 992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe 1796 992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe 1796 992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exepid process 1796 992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe"C:\Users\Admin\AppData\Local\Temp\992e0452dd58f031ca85ffd4d9f68a26fb91fb44778044d6a74bd09bfb4d629f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1796