Analysis

  • max time kernel
    48s
  • max time network
    53s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    01-12-2022 09:44

General

  • Target

    80f3810796126a2cb1cec3bb9dea24b244aafe55183581edfe45234e5a7c7e60.exe

  • Size

    1.6MB

  • MD5

    d3ef4484cf8f5ed96ad871c2e3e1afb5

  • SHA1

    3dac9413212fe46a87d7a297dc8dbd8556ac7b05

  • SHA256

    80f3810796126a2cb1cec3bb9dea24b244aafe55183581edfe45234e5a7c7e60

  • SHA512

    50682852599b5f8957dbfabed9c2a145a2ef861201ffc0afb1a0f3c1a9d3a23e6ed6a6bc7f0c2304e393080f08281981539b13d087f9ed57777d8e6f566ec107

  • SSDEEP

    24576:lKh2AayiNxyBAbeHRafmwdwGefwrmUiGMR8rGoOv4u9zbN+YPAB8:lKTiTdeHeyGprFiGr2HP08

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\80f3810796126a2cb1cec3bb9dea24b244aafe55183581edfe45234e5a7c7e60.exe
    "C:\Users\Admin\AppData\Local\Temp\80f3810796126a2cb1cec3bb9dea24b244aafe55183581edfe45234e5a7c7e60.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1376-54-0x0000000075091000-0x0000000075093000-memory.dmp

    Filesize

    8KB

  • memory/1376-55-0x0000000000400000-0x000000000090F000-memory.dmp

    Filesize

    5.1MB

  • memory/1376-56-0x0000000000400000-0x000000000090F000-memory.dmp

    Filesize

    5.1MB