142dbdbec076e4c94c9d01c7dbdd31ccf6947cceb9afebe92fb3d2e06d527603 | Triage

Analysis

max time kernel
132s
max time network
175s
platform
windows7_x64
resource
win7v20210410
submitted
11-06-2021 17:34

Sharing

Report Analysis Logs

General

Target

comprobante de pago.exe
Size

961KB
MD5

3ac88ff8e263df94911300adad7701f9
SHA1

288c584783bcabeed05d36ca0f6fb34eaa6c6412
SHA256

142dbdbec076e4c94c9d01c7dbdd31ccf6947cceb9afebe92fb3d2e06d527603
SHA512

9cc8480aa2afb9e18cc40124afe4b92e1026ab26ba46f9ab7606cfd4cd02e1b1d69aeb8299ccee5a35c2d73018859ed96c8b792f58d30aabf3f99729e47a0e37

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

comprobante de pago.exe

pid process

1088 comprobante de pago.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

comprobante de pago.exe

pid process

1088 comprobante de pago.exe

C:\Users\Admin\AppData\Local\Temp\comprobante de pago.exe
"C:\Users\Admin\AppData\Local\Temp\comprobante de pago.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1088-59-0x0000000075561000-0x0000000075563000-memory.dmp

Filesize
8KB

Download
memory/1088-60-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download