9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b

Analysis

max time kernel
184s
max time network
196s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
10-02-2023 18:18

Target

9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b.exe
Size

837KB
MD5

2016b28a17b404fb4d5516a40de34a63
SHA1

7fdfec9532da426b17eaa3b85e1a8e8beae29760
SHA256

9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b
SHA512

3917b650a45145d6c6bd7c58384cb946181ac257ef3c3f5a4a7be862c9ad8863f724c37165b4679298287576095093829874508650f004a757cc07f1ce15a281
SSDEEP

24576:+GfWg7WvmEMyQ0N9mWp0wFnkhZ96xR3U2:+MW3maQLW+akhz6f37

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b.exe

pid process

4100 9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b.exe

pid	process
4100	9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b.exe

C:\Users\Admin\AppData\Local\Temp\9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b.exe
"C:\Users\Admin\AppData\Local\Temp\9e7b5f6114f1fdee0b8ff18447f3b9bd90128d5d1ac632014ca53a9e629c336b.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4100

memory/4100-132-0x0000000000400000-0x00000000006C0000-memory.dmp

Filesize
2.8MB

Download
memory/4100-133-0x0000000000400000-0x00000000006C0000-memory.dmp

Filesize
2.8MB

Download
memory/4100-134-0x0000000000400000-0x00000000006C0000-memory.dmp

Filesize
2.8MB

Download
memory/4100-135-0x0000000000400000-0x00000000006C0000-memory.dmp

Filesize
2.8MB

Download
memory/4100-136-0x0000000000400000-0x00000000006C0000-memory.dmp

Filesize
2.8MB

Download