873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0

Analysis

max time kernel
32s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-02-2023 18:14

Target

873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe
Size

847KB
MD5

ef5515f2b396c24261d6a724cf4430dc
SHA1

4ee6373e5c7b7a77df06bf7ed92ee66cd3ca33b7
SHA256

873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0
SHA512

7dac1fc808521b233810dd65fccab09d1cfc822132acef7d92dc34bcde406fbc037bc1066f7caaa40f89ea9d5095705ced75244ea9e597e5556325015ee6dacf
SSDEEP

24576:PZYaWYoEKh90JTbpm+gunZ/czon/jhFV5T9kDLiH5LzQLNzW:xY9YoMdbpHZ/V/NTl90eQLNq

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe

pid process

1520 873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe

pid	process
1520	873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe

C:\Users\Admin\AppData\Local\Temp\873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe
"C:\Users\Admin\AppData\Local\Temp\873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1520

memory/1520-54-0x0000000075CF1000-0x0000000075CF3000-memory.dmp

Filesize
8KB

Download
memory/1520-55-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/1520-56-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/1520-57-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/1520-58-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/1520-59-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download