Overview
overview
10Static
static
10??????? ?????????.exe
windows7-x64
6??????? ?????????.exe
windows10-2004-x64
6??????? appdata.bat
windows7-x64
3??????? appdata.bat
windows10-2004-x64
3????????? ?????.exe
windows7-x64
1????????? ?????.exe
windows10-2004-x64
1????????? ...? .exe
windows7-x64
4????????? ...? .exe
windows10-2004-x64
4Everything.exe
windows7-x64
6Everything.exe
windows10-2004-x64
6Analysis
- max time kernel
140s - max time network
119s - platform
windows7_x64 - resource
win7-20231129-en - resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system - submitted
12/06/2024, 23:52
Static task
static1
Behavioral task
behavioral1
Sample
??????? ?????????.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
??????? ?????????.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
??????? appdata.bat
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
??????? appdata.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
????????? ?????.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
????????? ?????.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
????????? ?????????? .exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
????????? ?????????? .exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Everything.exe
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
Everything.exe
Resource
win10v2004-20240611-en
General
- Target ????????? ?????.exe
- Size 1.6MB
- Sample240612-3wpajswclc
- SHA256 58304b1ed9a66d44938f1e04767d1219194693bc918750388f259b1d0d251dc1
- MD5 faaff4148db8cda4068234f5d5110c60
- SHA1 b744ae0ee7f3cfeb762a4c9ea4b72f1f092fe391
- SHA512 1956bad6e775b08fab06358225b5cb027ec3bcf35fa304c7e9dbcfcefe55b887a0dc95db24d6655eb299d6abb6740d64f36912683549c951d73836e4e63a18f0
- SSDEEP 24576:0I0a0W7eWRWhccdtwc2DXeYU2qNEV9g7er:0IGE2ccnmhqa
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2368 _________ _____.exe