Analysis
- max time kernel
133s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
26/05/2024, 06:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
36cba9f836266dd47c2629af72d7fa24.exe
Resource
win7-20240419-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
36cba9f836266dd47c2629af72d7fa24.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target 36cba9f836266dd47c2629af72d7fa24.exe
- Size 1.0MB
- Sample240526-hemeeaba85
- SHA256 3ce9fcec1c68c11c4502acdd2c0f0e18c5b5593cb0dbe8ca2fd7ac42189617cc
- MD5 36cba9f836266dd47c2629af72d7fa24
- SHA1 277628e74f7f1dc7aa16412d5c476f62bab39e89
- SHA512 02801256dd4341ee4f8ec46a363ad5271bab9db110253a1ac79dc1612b860703ab669e03b653f9f935d56c19b7c35eaa3d118e52f17ebfbdc10e115040a6b776
- SSDEEP 24576:F0MgCdHTUzZJdlevZPamfhE/Um7D1fUggepjfJ+gaELmecS:F0MgCdHTkJAUmfhtIaEJB
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4932 36cba9f836266dd47c2629af72d7fa24.exe 4932 36cba9f836266dd47c2629af72d7fa24.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4932 36cba9f836266dd47c2629af72d7fa24.exe 4932 36cba9f836266dd47c2629af72d7fa24.exe 4932 36cba9f836266dd47c2629af72d7fa24.exe