Overview

overview

6

Static

static

WindowsFormsApp1.exe

windows7_x64

6

WindowsFormsApp1.exe

windows10_x64

6

Resubmissions

12/02/2022, 08:00

220212-jwe74ahgh6 8

12/01/2022, 18:56

220112-xlrd9sdfhm 8

12/01/2022, 06:29

220112-g9cm1sbdg5 6

Analysis

  • max time kernel
    362s
  • max time network
    364s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    12/01/2022, 06:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    WindowsFormsApp1.exe

  • Size

    117KB

  • MD5

    e7138eb2f838114591d0917050710bff

  • SHA1

    55f4b508ed4ed8e6650057b7a7538fda9dbdf2e7

  • SHA256

    bb0bca92cc74cac6b770649c5e70b0f4fd177de58fcfc7c719223485624dc28b

  • SHA512

    09a05490a40a05e1df42022742512a417c1a6970c06f32e445fb4aa12a123ea72f7cb2ed4da1ac1365229114c18578ae3e4baecbd653f81b77cf750a86554cc2

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 3 IoCs
  • Suspicious use of FindShellTrayWindow 40 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WindowsFormsApp1.exe
    "C:\Users\Admin\AppData\Local\Temp\WindowsFormsApp1.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Suspicious use of FindShellTrayWindow
    PID:1756
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:1912

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1756-55-0x0000000000CE0000-0x0000000000D02000-memory.dmp

      Filesize

      136KB

      Download

    • memory/1756-56-0x0000000000CE0000-0x0000000000D02000-memory.dmp

      Filesize

      136KB

      Download

    • memory/1756-57-0x00000000769D1000-0x00000000769D3000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1756-58-0x0000000004C40000-0x0000000004C41000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1756-59-0x0000000004C45000-0x0000000004C56000-memory.dmp

      Filesize

      68KB

      Download

    • memory/1912-60-0x000007FEFC261000-0x000007FEFC263000-memory.dmp

      Filesize

      8KB

      Download