ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99 | Triage

Analysis

max time kernel
49s
max time network
57s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
01-02-2022 02:55

Sharing

Report Analysis Logs

General

Target

ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99.exe
Size

527KB
MD5

e6eb304d38c6426faa5eaa3576dd72c3
SHA1

435dd07d0f04aec7da02d66b665573e3ee4fe80d
SHA256

ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99
SHA512

1bfa0aba00bcee022d26836441b792c107afead8783a3273e5202ac43e59e53034a7aadb295b5c3194745b84e5fdf7a818e842efaae995dd8b5ac6d5bd6035cc

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99.exe

pid process

1828 ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99.exe

C:\Users\Admin\AppData\Local\Temp\ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99.exe
"C:\Users\Admin\AppData\Local\Temp\ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...