Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
18-04-2022 18:55
Static task
static1
Behavioral task
behavioral1
Sample
8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe
-
Size
882KB
-
MD5
c9def610093255d0f56efbc440c6be61
-
SHA1
a601db24033b7a442df8c4db3aa0ed10347326c1
-
SHA256
8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9
-
SHA512
f9c6dcf94261ee8b67864f4e345c1bb79b08fa7311b71deecc585daf79645c06fa6f52e1338baa69da1459724e086032416bcc8637fa8b53f4d6363faf1a1e13
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exepid process 4836 8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exepid process 4836 8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exepid process 4836 8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe 4836 8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe"C:\Users\Admin\AppData\Local\Temp\8f71514ccf1775932afb57c030acbae07cddff0f00e5c121f9b121b29c461ef9.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx