3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f

Analysis

max time kernel
40s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-02-2023 18:17

Target

3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
Size

847KB
MD5

e3bc50be39822896959209fceacdb19c
SHA1

6a2afe67b1345a08f635ea7164f401bb9204ae06
SHA256

3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f
SHA512

c23f768c8e5d26a4994dfdc4c990f747cc7196e51454174b1dea8b4968c9d5997225a21b21fc4e02cf9726f594f3a4576c4b08d7a630396d9f742f2aee5a44c9
SSDEEP

24576:WiF+OIM+OBV2QnddgubtBw5XIEtAR72ii40vLNzT:ZFxJzBYQdTbDwNC7hi4ULN/

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe

pid process

288 3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe

pid	process
288	3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe

C:\Users\Admin\AppData\Local\Temp\3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
"C:\Users\Admin\AppData\Local\Temp\3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:288

memory/288-54-0x0000000075351000-0x0000000075353000-memory.dmp

Filesize
8KB

Download
memory/288-55-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/288-57-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/288-58-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/288-56-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download
memory/288-59-0x0000000000400000-0x00000000006CF000-memory.dmp

Filesize
2.8MB

Download