Analysis
-
max time kernel
20s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
31-05-2024 00:31
Behavioral task
behavioral1
Sample
9087b832d680e7d6fbff11594b719ecf32c5bbe0c667a61832ce665f4df13e99.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9087b832d680e7d6fbff11594b719ecf32c5bbe0c667a61832ce665f4df13e99.exe
Resource
win10v2004-20240426-en
General
-
Target
9087b832d680e7d6fbff11594b719ecf32c5bbe0c667a61832ce665f4df13e99.exe
-
Size
130KB
-
MD5
a5f9a6cc66f6bbe2507647f737d1d8af
-
SHA1
48fdcc999118453847fc98a5e9a77a509f177813
-
SHA256
9087b832d680e7d6fbff11594b719ecf32c5bbe0c667a61832ce665f4df13e99
-
SHA512
8b87ef64dcc3dc08fef4d08282f69960224e46147b67d2f9b2209d44709d1097299dbe04873ae2b10e4a5704942cc662ac5df0623e5c3ea96645cb0e9557a210
-
SSDEEP
1536:eH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5UROXTmZ:SKQJcinxphkG5Q6GdpIOkJHhKRyOXK
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1056-0-0x0000000000400000-0x0000000000423000-memory.dmp UPX behavioral1/memory/1056-103-0x0000000000400000-0x0000000000423000-memory.dmp UPX -
Processes:
resource yara_rule behavioral1/memory/1056-0-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/1056-103-0x0000000000400000-0x0000000000423000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
9087b832d680e7d6fbff11594b719ecf32c5bbe0c667a61832ce665f4df13e99.exepid process 1056 9087b832d680e7d6fbff11594b719ecf32c5bbe0c667a61832ce665f4df13e99.exe