Analysis
-
max time kernel
2s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29-09-2024 07:30
Static task
static1
Behavioral task
behavioral1
Sample
990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27.exe
Resource
win10v2004-20240802-en
General
-
Target
990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27.exe
-
Size
189KB
-
MD5
e1d683ee1746c08c5fff1c4c2b3b02f0
-
SHA1
65a76ccf28a6c9593683a874df1c9bca514fb9c4
-
SHA256
990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27
-
SHA512
a4b92992a8088a96db4877eba7da35425c191d13e15a3e3a237128b3d748d99d53daa93449e710503c05c1b8b788ffb9d6fb748c9c1589dc411b949d31c6df51
-
SSDEEP
3072:ZIJlTOTXoPWZgUkz5BUXULdKj6pDc+wX2F4759ZEAr:6JlTVPlqXULdKjVhX2F8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2856 990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27.exe"C:\Users\Admin\AppData\Local\Temp\990b7eec4e0d9a22ec0b5c82df535cf1666d9021f2e417b49dc5110a67228e27.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2856
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service1⤵PID:2736
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service1⤵PID:3084
-
C:\Windows\system32\sihost.exesihost.exe1⤵PID:2420
-
C:\Windows\system32\sihost.exesihost.exe1⤵PID:3336