Resubmissions
18/06/2021, 14:00
210618-cttt9ct9x6 1Analysis
-
max time kernel
44s -
max time network
113s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
18/06/2021, 14:00
Static task
static1
Behavioral task
behavioral1
Sample
Borgla.exe
Resource
win7v20210408
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Borgla.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
Borgla.exe
-
Size
973KB
-
MD5
6fb835930c05d9dc82a27a2479a1a1a5
-
SHA1
0a8d77388d4afc10cbe2cc83c7d8f2fa1aaf3c5c
-
SHA256
329da9d29a6e9742a391f6c71614663ff618a0be7035490425861f48870e75db
-
SHA512
82144d84cb899b93aee2ec196105731d0c22dc25a25b69ef252f48b1d55e800e89886a9f41419dd9570f16ca5dea3b59b5376d08e85063704bf5bb9b97358253
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe 3156 Borgla.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Borgla.exe"C:\Users\Admin\AppData\Local\Temp\Borgla.exe"1⤵
- Suspicious use of FindShellTrayWindow
PID:3156
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1804