Resubmissions
07/02/2026, 08:09
260207-j2gywahy3c305/09/2025, 03:39
250905-d7llcsvvg1322/07/2025, 13:54
250722-q7jszscp3v1022/07/2025, 13:49
250722-q41x4awwdv301/11/2024, 12:33
241101-pradyaypdv1027/10/2024, 23:08
241027-24hmasskhj1020/10/2024, 16:28
241020-tyzdvsxgqb320/10/2024, 16:26
241020-tx2gtszekk306/10/2024, 17:53
241006-wgrzka1eme02/10/2024, 11:53
241002-n2j6fsycqb3Analysis
- max time kernel
286s - max time network
290s - platform
windows7_x64 - resource
win7-20241010-en - resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system - submitted
01/11/2024, 12:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dl2.exe
Resource
win7-20241010-en
windows7-x64
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
dl2.exe
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
11 signatures
300 seconds
General
- Target dl2.exe
- Size 849KB
- Sample241101-pradyaypdv
- SHA256 342f04c4720590c40d24078d46d9b19d8175565f0af460598171d58f5ffc48f3
- MD5 c2055b7fbaa041d9f68b9d5df9b45edd
- SHA1 e4bd443bd4ce9029290dcd4bb47cb1a01f3b1b06
- SHA512 18905b75938b8af9468b1aa3ffbae796a139c2762e623aa6ffb9ec2b293dd04aa1f90d1ed5a7dbda7853795a3688e368121a134c7f63e527a8e5e7679301a1dc
- SSDEEP 12288:A3RY3yNqMRTF4q2rxHn2ot/81xpNQyjUXlmoe7ufjHAtjXD7r2:A3RY3R24q+xn/8Xp2yOl5fzQ/2
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2432 taskmgr.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2432 taskmgr.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe 2432 taskmgr.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2272 dl2.exe 2780 dl2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\dl2.exe"C:\Users\Admin\AppData\Local\Temp\dl2.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2272
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2432
-
C:\Users\Admin\AppData\Local\Temp\dl2.exeC:\Users\Admin\AppData\Local\Temp\dl2.exe {3339DEE1-2346-42EC-950B-F2DBC46F91B7}1⤵
- Suspicious use of SetWindowsHookEx
PID:2780