6392c4e2ead675ff691c4a80a9dce7778eec1e6f1a96c1ac4bd213047634d61c | Triage

Analysis

max time kernel
157s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 07:00

Sharing

Report Analysis Logs

General

Target

tmp.exe
Size

7.6MB
MD5

7f155082b18c1e799a17e17603b9c8dc
SHA1

df30f1c53d08a39f3c4c633a83e33e57fb65946d
SHA256

6392c4e2ead675ff691c4a80a9dce7778eec1e6f1a96c1ac4bd213047634d61c
SHA512

14fa3659e19f7d2c425b7a5eb7cd6b36ed568a2355362d2f3a83bbdf1958c9d1e5a5a556fe4a9b19fad8b74f542187ab7b79f092bd29cd95bb82762aaeba530b
SSDEEP

196608:H8hWlBwZMn1SLBaaw+LRSamxzIrb/yDehWAn89X+/:chWXwe1naw+SaizY/WEWAnR/

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

tmp.exe

pid process

4992 tmp.exe

C:\Users\Admin\AppData\Local\Temp\tmp.exe
"C:\Users\Admin\AppData\Local\Temp\tmp.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads