Overview

overview

10

Static

static

5

RFQ_009876...27.exe

windows7_x64

10

RFQ_009876...27.exe

windows10-2004_x64

1

Analysis

  • max time kernel
    90s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    19/04/2022, 13:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RFQ_00987652_20127.exe

  • Size

    1.7MB

  • MD5

    710708156fd1fa5976a8cb4f56af5d29

  • SHA1

    cae88c79966a8f5ca65f252761eb8891f3ad1e8b

  • SHA256

    c3fc15b30bc7d5eac9d29aee10d6f1362ec0ab007d2b06c0e5fa40eb8da63ae0

  • SHA512

    d4b41a0471837270337dafb01343077faeeebcba2a3c390cd6f340b8621ff48f6fc0719c4c785392fbffc4590863c9fcffcdcd788b765cbdca3f257cf4a0614b

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RFQ_00987652_20127.exe
    "C:\Users\Admin\AppData\Local\Temp\RFQ_00987652_20127.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1428-130-0x00000000041E0000-0x0000000004261000-memory.dmp

    Filesize

    516KB

    Download