Analysis
- max time kernel
90s - max time network
125s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
19/04/2022, 13:48
General
- Target RFQ_00987652_20127.exe
- Size 1.7MB
- Sample220419-q4e1mabaeq
- SHA256 c3fc15b30bc7d5eac9d29aee10d6f1362ec0ab007d2b06c0e5fa40eb8da63ae0
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RFQ_00987652_20127.exe"C:\Users\Admin\AppData\Local\Temp\RFQ_00987652_20127.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1428-130-0x00000000041E0000-0x0000000004261000-memory.dmp