Analysis
-
max time kernel
40s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
10-02-2023 18:17
Behavioral task
behavioral1
Sample
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
Resource
win10v2004-20221111-en
General
-
Target
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
-
Size
847KB
-
MD5
e3bc50be39822896959209fceacdb19c
-
SHA1
6a2afe67b1345a08f635ea7164f401bb9204ae06
-
SHA256
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f
-
SHA512
c23f768c8e5d26a4994dfdc4c990f747cc7196e51454174b1dea8b4968c9d5997225a21b21fc4e02cf9726f594f3a4576c4b08d7a630396d9f742f2aee5a44c9
-
SSDEEP
24576:WiF+OIM+OBV2QnddgubtBw5XIEtAR72ii40vLNzT:ZFxJzBYQdTbDwNC7hi4ULN/
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exepid process 288 3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/288-54-0x0000000075351000-0x0000000075353000-memory.dmpFilesize
8KB
-
memory/288-55-0x0000000000400000-0x00000000006CF000-memory.dmpFilesize
2.8MB
-
memory/288-57-0x0000000000400000-0x00000000006CF000-memory.dmpFilesize
2.8MB
-
memory/288-58-0x0000000000400000-0x00000000006CF000-memory.dmpFilesize
2.8MB
-
memory/288-56-0x0000000000400000-0x00000000006CF000-memory.dmpFilesize
2.8MB
-
memory/288-59-0x0000000000400000-0x00000000006CF000-memory.dmpFilesize
2.8MB