8611058ed1f312a4bca3bbfe28c9a9d887a8494c12468c4320cc365dd91f1a3b

Analysis

max time kernel
23s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29-11-2022 06:27

Target

8611058ed1f312a4bca3bbfe28c9a9d887a8494c12468c4320cc365dd91f1a3b.exe
Size

109KB
MD5

993719fa732f8fecc5a13524e01ec212
SHA1

cdc70fe14a4872de6d48ccf995cae4762424b0f7
SHA256

8611058ed1f312a4bca3bbfe28c9a9d887a8494c12468c4320cc365dd91f1a3b
SHA512

0f3d6bb8bb677d5289b211d9b2ef4f0c9689afc53325a110b14d1af6fb16bf822491c125cafc2bff8708c61dc17e4a2abe9ee47b63e520364692daf863c40dfd
SSDEEP

3072:dTLBiOHZgip+JLojs46sW2ZoWGhIHwvK/oSRJc:dXBNgi19V2IHwvGoyJ

Score

1^/10

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1664	8611058ed1f312a4bca3bbfe28c9a9d887a8494c12468c4320cc365dd91f1a3b.exe
1664	8611058ed1f312a4bca3bbfe28c9a9d887a8494c12468c4320cc365dd91f1a3b.exe

C:\Users\Admin\AppData\Local\Temp\8611058ed1f312a4bca3bbfe28c9a9d887a8494c12468c4320cc365dd91f1a3b.exe
"C:\Users\Admin\AppData\Local\Temp\8611058ed1f312a4bca3bbfe28c9a9d887a8494c12468c4320cc365dd91f1a3b.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1664

memory/1664-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

Filesize
8KB

Download
memory/1664-55-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download