Analysis
-
max time kernel
43s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
26/10/2022, 18:50
Static task
static1
Behavioral task
behavioral1
Sample
8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe
Resource
win10v2004-20220812-en
General
-
Target
8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe
-
Size
831KB
-
MD5
4ba3c4ea233af4f47c6392270ae694c2
-
SHA1
14a4095d1e31d8169f1be01934a2df4eeb728689
-
SHA256
8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404
-
SHA512
f294ecfb7b2fabfe98736ac279e2a38b35dbd932e6e0abe8f8e3ee89566382c5e24ec3c918bd33995683767528b8cf5182483f9f9c6d31f5001135ad9fe5c048
-
SSDEEP
12288:YZiCWKn8o2cdljzCALEoxOq1QdvDCGIJHOoiqQzbbOGjHxvFxjtYF/PO6CBRp+:aiO8qjVLEBE2hxh6gxuFnLCx
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1904 8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe 1904 8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1904 8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe 1904 8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe"C:\Users\Admin\AppData\Local\Temp\8c84f7e4cfe12c17f5e2c6bd4b7d60307ec7f09edd5c9516326b3118ce937404.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1904