Analysis

  • max time kernel
    76s
  • max time network
    80s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    21/03/2023, 01:30

General

  • Target

    WindowTabs.exe

  • Size

    3.6MB

  • MD5

    89168d315037725d003be28bf1656c78

  • SHA1

    e9be9807ac70ab43701244746787fbf94fd81350

  • SHA256

    afbc7a8f4b32281f8304a77bbf98f816f7a8eea4ea981514c0f4062f06ee1455

  • SHA512

    142c45893a3bfb1029fac2ff081d57bff05a8a0ebe7204c9d4d2c8bdc5ec429d464d321a6096884e15fdd0b3a968ff1223ccdd6d74b002a836323a6b49b9b0c9

  • SSDEEP

    24576:YeLJm0EgPfXqjZzLICfGsxp4Pi/wIhVBbQD4lbQVapP0QaFU2DhIhZGUgLqQ54PJ:YhYqjZvII/woNkhIPGUg2l

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WindowTabs.exe
    "C:\Users\Admin\AppData\Local\Temp\WindowTabs.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:4116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4116-116-0x000001F620C70000-0x000001F621014000-memory.dmp

    Filesize

    3.6MB

  • memory/4116-117-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB

  • memory/4116-120-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB

  • memory/4116-121-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB

  • memory/4116-122-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB

  • memory/4116-123-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB

  • memory/4116-124-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB

  • memory/4116-125-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB

  • memory/4116-127-0x000001F63B560000-0x000001F63B570000-memory.dmp

    Filesize

    64KB