Analysis
-
max time kernel
149s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 19:54
Static task
static1
Behavioral task
behavioral1
Sample
f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe
Resource
win10v2004-20240508-en
General
-
Target
f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe
-
Size
11.8MB
-
MD5
7126f5dcaf63b2e6fa7903a68c3ed533
-
SHA1
5704d131e75eb3b3811e008df3580e359b43bc56
-
SHA256
f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227
-
SHA512
e5a044052b2f0c52402a0ad716d3fb0139fe2a09a8a5af3d9b86897fd40f17306fa667f901ea81fbb885788f7c6b821db7ad03bfc99ce81ed9a231d081220258
-
SSDEEP
196608:dQmJ1OorhZnExfbRIM4Jsv6tWKFdu9CW6H:dQ8jMIM4Jsv6tWKFdu9CR
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3028 f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3028 f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe 3028 f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3028 f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe 3028 f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3028 f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe 3028 f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe"C:\Users\Admin\AppData\Local\Temp\f1dd56dd5407bb80f6f6ef77dc635d7c687ccea7c5cc0b003c082867f586a227.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3028