e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 02:31

Target

e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e.exe
Size

3.4MB
MD5

2804652b0602b4ffe6c1c91d8318a400
SHA1

1511cf68fd94e222d59784589ff93168d3c8a1d9
SHA256

e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e
SHA512

1014e7734d015e6546b14131ad7feeee02a2f6bc30430da2e24c4cb2ae34cb93b794b0c8f00fea32f098898cd79c4829753ace5ede730964f1cf3c4b950bd2c6
SSDEEP

49152:XArqb7vGU0OOGjLfEZ8l3x5vSDERdq45prd4R/jWVp/jWVihe:wc7T09Ell3Xd3paWd

Score

9^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/2316-1-0x0000000000E70000-0x00000000011FC000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e.exe

pid process

2316 e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e.exe

pid	process
2316	e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e.exe

C:\Users\Admin\AppData\Local\Temp\e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e.exe
"C:\Users\Admin\AppData\Local\Temp\e669b0f9113444926f5ad93250cc85f3cc415456eccecac0f784e34d3525c67e.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2316

memory/2316-0-0x0000000000090000-0x0000000000091000-memory.dmp

Filesize
4KB

Download
memory/2316-1-0x0000000000E70000-0x00000000011FC000-memory.dmp

Filesize
3.5MB

Download
memory/2316-3-0x0000000000090000-0x0000000000091000-memory.dmp

Filesize
4KB

Download