Analysis
-
max time kernel
29s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
25-02-2023 20:21
General
-
Target
df92b52c8f0c0aa9c652c24205c4eaee1d8836044177cbad297a55cc7bacd833.exe
-
Size
3.3MB
-
MD5
52ad6b1e43214fd8376e0f5ce0aef32c
-
SHA1
0ba7fb1e2be5197e8b234fa59d4ad4f1a230ebbb
-
SHA256
df92b52c8f0c0aa9c652c24205c4eaee1d8836044177cbad297a55cc7bacd833
-
SHA512
e8c8b1d9aa13c24996e5efe4b3b3eaa599f9add0de6680785c164c9a49d666f7aff92c38b74a671ff8f82a9a343544ff67fbe246c6b154d35562e4eb9d4cb0d0
-
SSDEEP
98304:FkHw3kpgv1wVH0E9A2PkyKtrbXMYkVOh3DiLA:qePQ0EO4KtrbRi2
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\df92b52c8f0c0aa9c652c24205c4eaee1d8836044177cbad297a55cc7bacd833.exe"C:\Users\Admin\AppData\Local\Temp\df92b52c8f0c0aa9c652c24205c4eaee1d8836044177cbad297a55cc7bacd833.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1696-54-0x0000000000400000-0x0000000001797000-memory.dmpFilesize
19.6MB
-
memory/1696-55-0x0000000000400000-0x0000000001797000-memory.dmpFilesize
19.6MB
-
memory/1696-56-0x0000000000400000-0x0000000001797000-memory.dmpFilesize
19.6MB
-
memory/1696-59-0x00000000033F0000-0x00000000033F1000-memory.dmpFilesize
4KB
-
memory/1696-58-0x0000000000260000-0x0000000000261000-memory.dmpFilesize
4KB
-
memory/1696-57-0x0000000003220000-0x0000000003221000-memory.dmpFilesize
4KB
-
memory/1696-60-0x0000000003430000-0x0000000003431000-memory.dmpFilesize
4KB
-
memory/1696-61-0x0000000003400000-0x0000000003401000-memory.dmpFilesize
4KB
-
memory/1696-62-0x0000000000400000-0x0000000001797000-memory.dmpFilesize
19.6MB
-
memory/1696-63-0x0000000000400000-0x0000000001797000-memory.dmpFilesize
19.6MB