fe5bb929cf68c32c2f89b4f4093d45bb23538e3d8ca203ab9037f7b456cc4202 | Triage

Analysis

max time kernel
45s
max time network
48s
platform
windows7_x64
resource
win7-20220715-en
resource tags

arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:43

Sharing

Report Analysis Logs

General

Target

1940-233-0x0000000000400000-0x0000000000417000-memory.exe
Size

92KB
MD5

b312720057302c607a3a265ea227da60
SHA1

373b065c0b8d9a4711e518401cf526f2fcfb8553
SHA256

fe5bb929cf68c32c2f89b4f4093d45bb23538e3d8ca203ab9037f7b456cc4202
SHA512

f59ed3daa19267cf055bf353d9fbcd2f1cf32167073eafb341f49c1027865040abcbca223b4c9d60bb9e3d0542c4683f7fcce13c811278a5b4ba1dd15badca07

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

1940-233-0x0000000000400000-0x0000000000417000-memory.exe

pid process

1096 1940-233-0x0000000000400000-0x0000000000417000-memory.exe
Suspicious use of SendNotifyMessage 1 IoCs

Processes:

1940-233-0x0000000000400000-0x0000000000417000-memory.exe

pid process

1096 1940-233-0x0000000000400000-0x0000000000417000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1940-233-0x0000000000400000-0x0000000000417000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1940-233-0x0000000000400000-0x0000000000417000-memory.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1096-54-0x0000000076031000-0x0000000076033000-memory.dmp

Filesize
8KB

Download