Analysis
-
max time kernel
116s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
31/01/2023, 19:22
General
-
Target
aa7a7dc3ff23e61943095096321200106322cadc231b2477d68e21d9c326246f.exe
-
Size
352KB
-
MD5
9546e7c97d6a269d7555b558e291599b
-
SHA1
7e231baed669af77b650d27f81b8354ed74b4db1
-
SHA256
aa7a7dc3ff23e61943095096321200106322cadc231b2477d68e21d9c326246f
-
SHA512
c05b6f94e7000c478522409b6e25a64d9c43b9d95d5b61a04d6bda2999086c97ae47d37d7b1d3c4518b5470d84c6262d8676cf53f48f3f5352ecfae0dbaea5f2
-
SSDEEP
6144:3TnBUngw1BMGc2svrhaYDNVs3bEQcySFFNydDp08TdYLSa5/s0aOS4ePJkv64n:3TnBG1B62KU+NVs+Hk6AdYGgsZOS4ePC
Score
8/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 2 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious use of FindShellTrayWindow 8 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa7a7dc3ff23e61943095096321200106322cadc231b2477d68e21d9c326246f.exe"C:\Users\Admin\AppData\Local\Temp\aa7a7dc3ff23e61943095096321200106322cadc231b2477d68e21d9c326246f.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
888KB
-
Filesize
888KB
-
Filesize
888KB