Overview

overview

5

Static

static

5

bb089fc3d7...88.exe

windows7-x64

1

bb089fc3d7...88.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    246s
  • max time network
    336s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    25-11-2022 12:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bb089fc3d7ef9cdd7e0034f8d391607ea5a19108aaf3566842c1910da2ffad88.exe

  • Size

    977KB

  • MD5

    73bfe4145034eeb9da2fa0ef8c8a31f3

  • SHA1

    cdbaa17503b5cafdb6aadbd71b6113126d4ca4d5

  • SHA256

    bb089fc3d7ef9cdd7e0034f8d391607ea5a19108aaf3566842c1910da2ffad88

  • SHA512

    364e451f45ade852384905575e2ce1184dde10dc04e2875a5d39c031b8e9180c406af1d03874f147786bc2da7c2ce6ad9979cf9929c3dd0ef76a0ad9098f310f

  • SSDEEP

    12288:Itb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSgaCgdq8pq+c26A:Itb20pkaCqT5TBWgNQ7aW8pzc26A

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 21 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bb089fc3d7ef9cdd7e0034f8d391607ea5a19108aaf3566842c1910da2ffad88.exe
    "C:\Users\Admin\AppData\Local\Temp\bb089fc3d7ef9cdd7e0034f8d391607ea5a19108aaf3566842c1910da2ffad88.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1500-54-0x0000000075D11000-0x0000000075D13000-memory.dmp
    Filesize

    8KB

    Download