Analysis
- max time kernel
15s - max time network
25s - platform
windows10-2004_x64 - resource
win10v2004-en-20220113 - submitted
05/02/2022, 12:05
Static task
static1
Behavioral task
behavioral1
Sample
a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
General
- Target a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe
- Size 1.8MB
- Sample220205-n9ewpsbdbk
- SHA256 a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce
- MD5 1f1a210509ca5d4a55c826f884d78512
- SHA1 36d9a3291f61675a8db5f15d0b9ea02c034266c8
- SHA512 c362f8f26a46a0e25fefb49553601c32ec511c32278551078f651a298008d5ea8d8694bec56df5330b3bd64986746ee3c2b9df612353385f53dd7b63091920cf
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 1780 a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe 1780 a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe 1780 a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 1780 a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe 1780 a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe 1780 a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe"C:\Users\Admin\AppData\Local\Temp\a21bb22d76ef8b9d5f73709b706b9a8e1c359a523bebd813e6c50259b4dc61ce.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1780