Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 19:07
Static task
static1
Behavioral task
behavioral1
Sample
6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe
Resource
win10v2004-20240709-en
General
-
Target
6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe
-
Size
5.2MB
-
MD5
fd1fcf5fd60dec418b5f5c8ac1312290
-
SHA1
81b3e94cbbc86f2271005efeabd500185346fa0c
-
SHA256
6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1
-
SHA512
7d1be4a9f5aeae25e67c4500fd0a83559aabac1b87d496286b382c131570d8f0dc1e5cd1b44ca1a1ffbc3fce17ead7aeaae2c0fb473f88289ae8c755f421a47b
-
SSDEEP
98304:qJmYb7IVavnQMccp4YgIcKr+ReQDmwh+/gse2IZZ5/iHLeGtiLN:qgYb2Hi4Yg+r+ttM/gse5Z5AtW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2272 6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2272 6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe 2272 6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe"C:\Users\Admin\AppData\Local\Temp\6c8a43f4e6811b7a99ba70348a3a4a26e9cb7299e31f9d85e889e80b03e100a1.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2272