Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23/05/2024, 20:26
Static task
static1
Behavioral task
behavioral1
Sample
d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe
Resource
win10v2004-20240426-en
General
-
Target
d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe
-
Size
2.1MB
-
MD5
cc5a8cf70f7709a842a3d24c132e2396
-
SHA1
cc793867c62ac0f8e97f9dbf21f1e0961746ec24
-
SHA256
d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870
-
SHA512
1e3f62bce2ee594e4c3294724489f2055a3eff6adc34c824b457f7e9fae042703eb38ec55607bcd648689acb6746a252097dd3ef4cc0dba0045fdb25a0474998
-
SSDEEP
24576:R06nmGhP82J0dPRt0FjXfqCNduHiSsw/Xt5wzGCqUPvk//TcJLEY87jEG3Jmy:Rf3n0dryCCNcQ/8/QJ2wcZ
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2856 d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe 2856 d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2856 d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe 2856 d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe 2856 d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe"C:\Users\Admin\AppData\Local\Temp\d582003a827b83747635c7116b1abc5071b82b54ea22250f8b73796f9c8e1870.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2856