e4e8aac2107834b2d895fc35d71bb396075d971c650ff173714c3d17956c7da6 | Triage

Analysis

max time kernel
134s
max time network
50s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 19:41

Sharing

Report Analysis Logs

General

Target

pandabanker_2.1.2.vir.exe
Size

336KB
MD5

dfb9784c77e51bfb53d018b7b64381ff
SHA1

ab94e10047ee84e26263fa4c1528295b3c9ef945
SHA256

e4e8aac2107834b2d895fc35d71bb396075d971c650ff173714c3d17956c7da6
SHA512

e5ac07c1cfda0111b5a30fbf04eda166588fba76547220b616f53eed1cbb4a31dd7c79c42c3af4925a8750e6bb87a391ec266b93137f176a302982b7997e3ec2

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

pandabanker_2.1.2.vir.exe

pid process

3848 pandabanker_2.1.2.vir.exe
Suspicious use of SendNotifyMessage 1 IoCs

Processes:

pandabanker_2.1.2.vir.exe

pid process

3848 pandabanker_2.1.2.vir.exe

C:\Users\Admin\AppData\Local\Temp\pandabanker_2.1.2.vir.exe
"C:\Users\Admin\AppData\Local\Temp\pandabanker_2.1.2.vir.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...