Overview
overview
10Static
static
106cdb1945b4...1f.exe
windows7-x64
76cdb1945b4...1f.exe
windows10-2004-x64
7$EXEFILE.exe
windows7-x64
1$EXEFILE.exe
windows10-2004-x64
1$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/$EXEFILE.exe
windows7-x64
1$TEMP/$EXEFILE.exe
windows10-2004-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 23:58
Static task
static1
Behavioral task
behavioral1
Sample
6cdb1945b437ad901cb1399793ccd675094a4cd8265fe92be815a38287f07c1f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6cdb1945b437ad901cb1399793ccd675094a4cd8265fe92be815a38287f07c1f.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$EXEFILE.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
$EXEFILE.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$TEMP/$EXEFILE.exe
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$TEMP/$EXEFILE.exe
Resource
win10v2004-20240611-en
General
- Target $EXEFILE.exe
- Size 5KB
- Sample240613-31csbawfqe
- SHA256 2ef95fbbceb36d20ccc464c8193266ab32b613bf2336b11f4f19bcaa1ea0bfd3
- MD5 04a46ed2f4dbb2229237ef397beee6dc
- SHA1 681466ada224d8a2571aa1629eac235454146927
- SHA512 e5f4142ce070418e9f3ec72139826c9feb038c8d1e1717d0724d182e94af1cd531426afb409c48a303ed8db53145e1bd6a2c4dcb03405f3eb5aa1ec7513d16e5
- SSDEEP 96:FvlrPZoh0IZ5C+l/QGdlLByCPaEhqec8:Fvwh/vl/QGoCCE7c8
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3352 $EXEFILE.exe 3352 $EXEFILE.exe