Analysis
-
max time kernel
179s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05/12/2022, 14:14
General
-
Target
5e41943de9c4c5208fe24025fa35a301f70f75c17c1338db1feac724ca2e72dc.exe
-
Size
746KB
-
MD5
07d3835f17f8570efe10cbd9486223a1
-
SHA1
494a738cda9c5f82c1994fe005d9f7f22f2f3633
-
SHA256
5e41943de9c4c5208fe24025fa35a301f70f75c17c1338db1feac724ca2e72dc
-
SHA512
0a9b637e6eefe1a37dffba8b4f7f4e19d51e64fea89c270776159a1c4de0d3cf0b0d20b5faad5f6e5f5ec388e8bbc91dbb0b0dbabda88b116f8f4e47c98b5d44
-
SSDEEP
6144:Q6viUNIPcmmmRm4EG76adSNc/B9XgGJ2Fc+y6xT:QtEmREGO8oc/B9Q1xT
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e41943de9c4c5208fe24025fa35a301f70f75c17c1338db1feac724ca2e72dc.exe"C:\Users\Admin\AppData\Local\Temp\5e41943de9c4c5208fe24025fa35a301f70f75c17c1338db1feac724ca2e72dc.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
-
C:\Program Files\qimi\Au_7Me.exe_DFA9983F57AF475C964D400A29E73BA4E1738ED2.exe"C:\Program Files\qimi\Au_7Me.exe_DFA9983F57AF475C964D400A29E73BA4E1738ED2.exe"2⤵
- Executes dropped EXE
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
288KB
MD5d7a053ed5d3cf670ea9c2dab302f0fb9
SHA146b1d6a73aaa9e276376546a03855b28b54ec6f4
SHA256922af7b37aed2a8d1c6fdea17135e8ac4992a30105c49405b9d62e9f6ebaf7b7
SHA5129f634981bf3b3e34d0e93a2f5b687946b620263c52d25ea66f6769050bc62f811ce44370922c8cbbcf4b3181b21f20ee02454e711853c0bd9622f440e27a98ef
-
Filesize
288KB
MD5d7a053ed5d3cf670ea9c2dab302f0fb9
SHA146b1d6a73aaa9e276376546a03855b28b54ec6f4
SHA256922af7b37aed2a8d1c6fdea17135e8ac4992a30105c49405b9d62e9f6ebaf7b7
SHA5129f634981bf3b3e34d0e93a2f5b687946b620263c52d25ea66f6769050bc62f811ce44370922c8cbbcf4b3181b21f20ee02454e711853c0bd9622f440e27a98ef
-
Filesize
296KB
-
Filesize
356KB
-
Filesize
356KB