Analysis
- max time kernel
1628s - max time network
1637s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
10/06/2024, 18:49
Behavioral task
behavioral1
Sample
srb2win.exe
Resource
win7-20240220-en
2 signatures
1800 seconds
Behavioral task
behavioral2
Sample
srb2win.exe
Resource
win10v2004-20240508-en
2 signatures
1800 seconds
General
- Target srb2win.exe
- Size 1.3MB
- Sample240610-xgmkhswere
- SHA256 945083469a67dcef068693fb1b745c2a71c5ae9fc859b2f24bf01c04ef91a044
- MD5 78fe2fb65d4e11995a66533ff8f32392
- SHA1 71c16e0473c0ca57973bc154c67f7a7f0049ecdf
- SHA512 7a26d5ae08e46984c247dba6c5d02b3e7b4ba529bf352a36d5b6d8583ee40113812c4636cf16ccb77369b33ef81be63fa6a992677d74aea1dc3f75d3147f8435
- SSDEEP 24576:GvdRIvKuvMq7u/RCPgswX/GNfVJGEp+qy4bicGXS3QafTGNUYOJwlCh/pxI:yqoq7oCfEu/psPafTUfOJwiBm
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2116-0-0x0000000000400000-0x0000000000ABF000-memory.dmp upx behavioral2/memory/2116-1-0x0000000000400000-0x0000000000ABF000-memory.dmp upx behavioral2/memory/2116-4-0x0000000000400000-0x0000000000ABF000-memory.dmp upx - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2116 srb2win.exe