3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094 | Triage

Analysis

max time kernel
9s
max time network
35s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
05-02-2022 16:42

Sharing

Report Analysis Logs

General

Target

3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe
Size

1.9MB
MD5

9676749bc9f77dbda5b2b35eb33f8e91
SHA1

821f9bde01288c8f5800fe5ba84cd1e3232eac61
SHA256

3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094
SHA512

17643cd69c45a053a58abb4ad7bea40154eea281489cc1bb9b723fa123e9b8980a88b2dd3c1ef73dbf98542fea141d4b78f784e54d4b103f5c135b2770558cac

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 3 IoCs

Processes:

3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe

pid	process
2700	3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe
2700	3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe
2700	3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe

Suspicious use of SendNotifyMessage 3 IoCs

Processes:

3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe

pid	process
2700	3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe
2700	3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe
2700	3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe

C:\Users\Admin\AppData\Local\Temp\3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe
"C:\Users\Admin\AppData\Local\Temp\3b2850cd8a54bfdb4c52c45f541c4d97047a28b19d034bbec609389b19019094.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads