Analysis
- max time kernel
5s - max time network
111s - platform
windows10_x64 - resource
win10 - submitted
13/10/2020, 12:31
General
- Target Lista comenzii noastre.exe
- Size 1.5MB
- Sample201013-qm116bpyfa
- SHA256 48d22944fdf7cf66fd1423b6ab2dd0143d96b4db7915e088088b8f826d46b000
Score
7/10
Malware Config
Signatures
- Drops startup file 1 IoCs
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Lista comenzii noastre.exe"C:\Users\Admin\AppData\Local\Temp\Lista comenzii noastre.exe"1⤵
- Drops startup file
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage