Resubmissions
01-07-2024 10:07
240701-l56gravgka 3Analysis
-
max time kernel
40s -
max time network
50s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-es -
resource tags
arch:x64arch:x86image:win10v2004-20240508-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
01-07-2024 10:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BAURDedallesGSAZACAKGVLIENDOCngok.exe
Resource
win10v2004-20240508-es
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
_____________________________________________________AQJGOYZJGTOBCTYK.dll
Resource
win10v2004-20240508-es
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
BAURDedallesGSAZACAKGVLIENDOCngok.exe
-
Size
125.9MB
-
MD5
b1be9e34004a3ddd2f6c53eb550004a1
-
SHA1
e65e471408be8591a4e5619067aa43c5ced49ce1
-
SHA256
709a6f455761c377c63700fe2407903f716f299ea79625699b3f4ccd7aba7be5
-
SHA512
e88d8e61badb86ac429dbf8f7ea22878dbd5c9a891964f0ca83d2b3f2c27ec42760b690b4d6a2c0d68fd9f538b0ae6ce8c09313672d81e17f9125c57068ca0ad
-
SSDEEP
98304:86Pf33eOAkVG2MQLVHVKuv2ME0i6CFc+skcfkDmQaRgaCWAds8wN:8weOAd4V1KM2MmM+YT/Z
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2492 BAURDedallesGSAZACAKGVLIENDOCngok.exe 2492 BAURDedallesGSAZACAKGVLIENDOCngok.exe 2492 BAURDedallesGSAZACAKGVLIENDOCngok.exe 2492 BAURDedallesGSAZACAKGVLIENDOCngok.exe 2492 BAURDedallesGSAZACAKGVLIENDOCngok.exe