Analysis
-
max time kernel
139s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2022, 18:23
Static task
static1
Behavioral task
behavioral1
Sample
0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60.exe
Resource
win10v2004-20220812-en
General
-
Target
0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60.exe
-
Size
480KB
-
MD5
013ff6a25ac685c264d609ba96f9e561
-
SHA1
3305e3d644ecc3c988e4f636f490ceea567b9952
-
SHA256
0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60
-
SHA512
efa3fe8170691e1bf55a6364df1e341f8cd55858bfcc5b134f5978b0ef6ccbf2a468ce875eb68a0b28cc4a10b2d7136b1129007797a1161dfbe05c52828a20b2
-
SSDEEP
6144:EbJDCHEIGzr6RiCmqWezO92hW2PDFmkUTRr4k5mgsWBHWXDO2DgCDzdl:WDcEIyr6MC4f9f0DF2mrWGD9DVr
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1112 0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1112 0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60.exe"C:\Users\Admin\AppData\Local\Temp\0a3dc8d1c0419a669cd9e5eb308460f118b9149abc2b01fa15f11b58b3c96f60.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1112