Analysis
-
max time kernel
51s -
max time network
56s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
26-06-2024 01:37
Static task
static1
Behavioral task
behavioral1
Sample
b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe
Resource
win10v2004-20240508-en
General
-
Target
b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe
-
Size
2.1MB
-
MD5
06b8df2ba3a77cd10c70623e2a6fb48c
-
SHA1
dc1d8c3c6ea70953ef60c92b0febe010cd02faa6
-
SHA256
b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc
-
SHA512
1a9377fd3f4204f99cef79fdc0eb7007aa0013f71789931745d668c8be3b87b315225bfe1af98a050aa201e6a5a321602de2fe95d637422049d7b50b41bcf7ca
-
SSDEEP
24576:R06nmGhP82J0dPRt0FjXfqCNduHiSsw/Xt5wzGCqU0vk//TcJLEY87jEG3Jmy:Rf3n0dryCCNcQ/N/QJ2wcZ
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 800 b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe 800 b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 800 b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe 800 b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe 800 b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe"C:\Users\Admin\AppData\Local\Temp\b9ceed88afd40368635903bfc8606e8e81c1a1c8f59d3a9820374cead74e46dc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:800