Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 13:12
Static task
static1
Behavioral task
behavioral1
Sample
2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13.exe
Resource
win10v2004-20240709-en
General
-
Target
2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13.exe
-
Size
36KB
-
MD5
b1562add4a3723226fbd3e61093ba909
-
SHA1
25e12e1e526a1ea03b808dffc51477de223330ec
-
SHA256
2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13
-
SHA512
1589ab57e206d7eb21a67f06ec89d875622395d35bf1f03cf60af5af2afbf1d4cc9479dd916a840fce6acc7845cbfb81f24caec761eb175740f1035ae0acdce3
-
SSDEEP
384:motPb66IuoMIsEZbyvXyP94zx7HJCeuqEecvOFOYSnOFa:3DvILMhEJyvXy141DJCeCelFOYSOF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2432 2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2432 2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13.exe"C:\Users\Admin\AppData\Local\Temp\2b72ce74238633f3ec6bd1580e2c06093d08be447c6db6b18f4f6d91d9590d13.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2432