Analysis
-
max time kernel
153s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07-11-2022 11:49
General
-
Target
ab3a395379b471bc538af876025e1559a448817da154a2653e439661a0d73dbe.exe
-
Size
830KB
-
MD5
36894afd91dce5bb0e55764036c9e702
-
SHA1
7c6999bcabb41977c8de1da54f49904a96da42d1
-
SHA256
ab3a395379b471bc538af876025e1559a448817da154a2653e439661a0d73dbe
-
SHA512
31ab9d96b78dad9cbcd3311e4a8cee42a6ce5d57daa6305cb3fea8267f1a474173fa3ce2da886c6c28b54f21bd26c203e437843e9398769982677b0e07054850
-
SSDEEP
24576:4gUOGuCR3scwwKIU8UEKTBgpioRaeTpzWKcMOD5:2wCdscACUEKTBgpNYeVzWBM
Score
8/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab3a395379b471bc538af876025e1559a448817da154a2653e439661a0d73dbe.exe"C:\Users\Admin\AppData\Local\Temp\ab3a395379b471bc538af876025e1559a448817da154a2653e439661a0d73dbe.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB