Analysis
-
max time kernel
128s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
25-06-2022 23:27
Static task
static1
Behavioral task
behavioral1
Sample
376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe
-
Size
1.1MB
-
MD5
0b0cef96675cd85fdbbe3e8968cbf924
-
SHA1
4db5d5b0425e5b83224fa6b3611385edfe314d20
-
SHA256
376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f
-
SHA512
b7e3805e7c184405973684e68235ab68bebcf050d70c68901d14f2c9b489baca481b956517151e42dcf59ca6d1a1348e1a33f47766f15459ce00360e59642e07
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exepid process 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe -
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exepid process 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe -
Suspicious use of SendNotifyMessage 4 IoCs
Processes:
376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exepid process 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe 964 376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe"C:\Users\Admin\AppData\Local\Temp\376523db4ccd1d021aa65208e85a665dcd1f83dbed024c1d1c0bb1d0bb24dd4f.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/964-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmpFilesize
8KB