Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
16/09/2022, 01:34
Static task
static1
Behavioral task
behavioral1
Sample
dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1.exe
Resource
win10v2004-20220812-en
General
-
Target
dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1.exe
-
Size
8.8MB
-
MD5
dd5895bdff7fa151a7960df5975b6a7b
-
SHA1
478bd9335460902683424ea349fce3e79fb1e23a
-
SHA256
dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1
-
SHA512
9f715228d1ee8b40a11c78a75944899c32edfa0ccd01d343a40b01d810ea5177cfc9d07ae7f0308bd8f9b4d1d40dddfd001b6dbbe06bb59bdd7daf3a762e87f7
-
SSDEEP
98304:ss2/vJihoZIcsYPaAJP5FB0YguszkQxA6MmhqjmMKeDS+:ssEvkhoZIcAAJP5ngTKTKe
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1436 dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1436 dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1.exe"C:\Users\Admin\AppData\Local\Temp\dde3fdd2a66e32452faed3f0a38ffe457864de5239c43af3d8770f342e1a40c1.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1436