873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0

Analysis

max time kernel
156s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
10-02-2023 18:14

Target

873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe
Size

847KB
MD5

ef5515f2b396c24261d6a724cf4430dc
SHA1

4ee6373e5c7b7a77df06bf7ed92ee66cd3ca33b7
SHA256

873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0
SHA512

7dac1fc808521b233810dd65fccab09d1cfc822132acef7d92dc34bcde406fbc037bc1066f7caaa40f89ea9d5095705ced75244ea9e597e5556325015ee6dacf
SSDEEP

24576:PZYaWYoEKh90JTbpm+gunZ/czon/jhFV5T9kDLiH5LzQLNzW:xY9YoMdbpHZ/V/NTl90eQLNq

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe

pid process

4392 873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe

pid	process
4392	873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe

C:\Users\Admin\AppData\Local\Temp\873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe
"C:\Users\Admin\AppData\Local\Temp\873baf822b8871800baf021fd636e15378156dd48d77bd4a53ee7739a37065a0.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4392

memory/4392-132-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/4392-134-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/4392-133-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/4392-135-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/4392-136-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download