Analysis
-
max time kernel
188s -
max time network
208s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25-11-2022 12:32
General
-
Target
a49d90427c2b665c011d7a1891733ee844b9c5b89d6643f01b221eb6f1ef47d9.exe
-
Size
842KB
-
MD5
3d7755e7918ee8844aab63c97787e91e
-
SHA1
e7bb8b0735faf98659225028e3de4a4d7cf54468
-
SHA256
a49d90427c2b665c011d7a1891733ee844b9c5b89d6643f01b221eb6f1ef47d9
-
SHA512
ff27652114947932c94ad8e6171e88e368e51e457004a3622700a925dd8650fc6bbc8477a69f707447b90324d813eff4a1281bf78db67cbd767a5ec98dab10f1
-
SSDEEP
12288:Itb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSga7TTp6A:Itb20pkaCqT5TBWgNQ7a/Tp6A
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a49d90427c2b665c011d7a1891733ee844b9c5b89d6643f01b221eb6f1ef47d9.exe"C:\Users\Admin\AppData\Local\Temp\a49d90427c2b665c011d7a1891733ee844b9c5b89d6643f01b221eb6f1ef47d9.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage