879a2a8a7d4dd3a92ad22feb7051839b05dd4a1ff599cb71da15caab5afedbe7 | Triage™

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
22/08/2022, 13:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a75995b9708a373890abd1fd63159238.exe
Size 84KB
Sample220822-p8m2csbag3
SHA256 879a2a8a7d4dd3a92ad22feb7051839b05dd4a1ff599cb71da15caab5afedbe7
MD5 a75995b9708a373890abd1fd63159238
SHA1 7c96733dcffcb01894a0f924ce10d9a69d1fd5de
SHA512 827150eae6e7d09f06d296aeaf15fa62c66b05e587b964d7c1f0e01729af8788badcc1fd1eb36f9a73534c00022451957748afe44613d9905e0a5941987c1955
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
396	a75995b9708a373890abd1fd63159238.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
396	a75995b9708a373890abd1fd63159238.exe

C:\Users\Admin\AppData\Local\Temp\a75995b9708a373890abd1fd63159238.exe
"C:\Users\Admin\AppData\Local\Temp\a75995b9708a373890abd1fd63159238.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads