Analysis

  • max time kernel
    44s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03-12-2022 18:26

General

  • Target

    cf9a0e3afbe60a3a8a3186a0c0491a7df9895fb998889ef716e0c6a6945bb171.exe

  • Size

    698KB

  • MD5

    f3a9808cb8e91f4e5c7553d543fe08da

  • SHA1

    baf88b439164a1b064d4e84d9716e4f0c350ea33

  • SHA256

    cf9a0e3afbe60a3a8a3186a0c0491a7df9895fb998889ef716e0c6a6945bb171

  • SHA512

    78295996fa99f228e2503d7157320efa6f3832e788c2a042ad60e443f742179e6de7eb88e327fb607353613c8ae7021104d8af3ab9c293ef16e0520cf31d15b8

  • SSDEEP

    12288:qNaryu7lF/YxPZzO9yfbGI7c4wZsirfW9NpUkWnJs91FMvwmb1TLP4R58QY8:qNa3AVZzO9yfbGzTZsirf/U1FWwmb1/6

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf9a0e3afbe60a3a8a3186a0c0491a7df9895fb998889ef716e0c6a6945bb171.exe
    "C:\Users\Admin\AppData\Local\Temp\cf9a0e3afbe60a3a8a3186a0c0491a7df9895fb998889ef716e0c6a6945bb171.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2040-54-0x0000000075591000-0x0000000075593000-memory.dmp

    Filesize

    8KB

  • memory/2040-55-0x0000000000400000-0x000000000055C000-memory.dmp

    Filesize

    1.4MB

  • memory/2040-56-0x0000000001D30000-0x0000000001D7C000-memory.dmp

    Filesize

    304KB

  • memory/2040-57-0x0000000002820000-0x0000000002823000-memory.dmp

    Filesize

    12KB

  • memory/2040-58-0x0000000000400000-0x000000000055C000-memory.dmp

    Filesize

    1.4MB