Analysis
-
max time kernel
140s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
09-06-2024 02:15
Static task
static1
Behavioral task
behavioral1
Sample
SuperF4-1.4.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20240426-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
SuperF4.exe
Resource
win10v2004-20240508-en
General
-
Target
SuperF4.exe
-
Size
39KB
-
MD5
00549b9467a142cb8f46d12353c1fc9e
-
SHA1
dbe73a6f07cdb1cc48e55eca5fe6b9f12a5eeb30
-
SHA256
3c83c8dfe3fb718c175c7444837c938a32af6a24572a9a3405fae217fa771941
-
SHA512
a396c49d4c6b520bdd7a8e8d2410e4d95d2b011d7015642235d3a2a3bb5d98966e02d1174c94442957b231c389055abbe6ae08df565ed9b0d069606758896bc0
-
SSDEEP
768:NqggLH5oiKv3Rf6iyJ653LX1hsvA27bpWM:QggLH430iOE3Lts
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3544 SuperF4.exe 3544 SuperF4.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3544 SuperF4.exe 3544 SuperF4.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3544 SuperF4.exe