Analysis
-
max time kernel
36s -
max time network
40s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
20-05-2022 23:35
Static task
static1
Behavioral task
behavioral1
Sample
a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe
-
Size
1.4MB
-
MD5
eca512d5289783f13b346958c0bca5d9
-
SHA1
061f5375c5edd832c9d6e9dcfa0a8733e1295dd0
-
SHA256
a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac
-
SHA512
20dc0f2ef11432cf63350b182f01c668d206a583473643932e4d2656f8f9f1932385bf14abed862e26ccb3f3919a703aeb562cea4d490cd877ed052d88c307f7
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
Processes:
a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exepid process 1972 a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe 1972 a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe 1972 a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe -
Suspicious use of SendNotifyMessage 3 IoCs
Processes:
a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exepid process 1972 a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe 1972 a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe 1972 a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe"C:\Users\Admin\AppData\Local\Temp\a948c3fb252ee14db710de435d1dc5f88d0923e6e4eb20fade67aaf5e2e425ac.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1972
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1972-54-0x0000000075F21000-0x0000000075F23000-memory.dmpFilesize
8KB