Overview
overview
7Static
static
75323af959d...0N.exe
windows7-x64
35323af959d...0N.exe
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3e$EXEFILE.exe
windows7-x64
3e$EXEFILE.exe
windows10-2004-x64
1wget.exe
windows7-x64
7wget.exe
windows10-2004-x64
7Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
15-09-2024 07:35
Behavioral task
behavioral1
Sample
5323af959dbacb040642d2bffda6d4c0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5323af959dbacb040642d2bffda6d4c0N.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
e$EXEFILE.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
e$EXEFILE.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
wget.exe
Resource
win7-20240903-en
General
-
Target
e$EXEFILE.exe
-
Size
342KB
-
MD5
f75a1f2be308fba5afea667a21c9e9b4
-
SHA1
fb844941a60b2aa1d57c4d8d8f33b768c56814d8
-
SHA256
903023707797633fb0776e6a5cd65c84ff07e6e9d3d58066f9f71e8b96079205
-
SHA512
b8405d2d379bdef7bc8136273cdc7ac36c2e2527163377f149dc8044d5e1ed9f8b9f2bc79c402c8971f426db8886d698608e31f97baa309b50b5861e332a4654
-
SSDEEP
6144:LZeZwfc0rwS1IwYNAbW0tuGEm49ehJj/HqgfmMWcW0CJ+2+NtKGM:1emflNSwOS3hJj/HqM/W0CgbP
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3016 e$EXEFILE.exe 3016 e$EXEFILE.exe