3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c | Triage

Analysis

max time kernel
51s
max time network
61s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
24-07-2022 15:29

Sharing

Report Analysis Logs

General

Target

3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
Size

2.0MB
MD5

14dda2333c3be90b4c3f2c293e457f2f
SHA1

f70df421922df32f05c97e9607770c28b9451d39
SHA256

3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c
SHA512

d0e8936c776f2db3bc8448f95d8796d71dc3fe38179b40662ec42bd02a65e74f4dfc3991e17841b11d1396418030d560ffce172110884da54422884e82199947

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 8 IoCs

Processes:

3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe

pid	process
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe

Suspicious use of SendNotifyMessage 8 IoCs

Processes:

3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe

pid	process
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
4792	3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe

C:\Users\Admin\AppData\Local\Temp\3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe
"C:\Users\Admin\AppData\Local\Temp\3b80fe1f81746eaaa3767f2cfaf18f829865912290279d68d7ac27400f60642c.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...