Analysis
- max time kernel
87s - max time network
90s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
19/04/2023, 15:37
General
- Target 4496ZHgsFRBwAMoJInuTtIFfapEt.exe
- Size 1009KB
- Sample230419-s2g4babe24
- SHA256 4d7fd70b1528c81d4c131f99c044df721deb4d74a34a1d903edb02da79446ebe
Score
1/10
Malware Config
Signatures
- NTFS ADS 1 IoCs
- Suspicious use of FindShellTrayWindow 5 IoCs
- Suspicious use of SendNotifyMessage 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4496ZHgsFRBwAMoJInuTtIFfapEt.exe"C:\Users\Admin\AppData\Local\Temp\4496ZHgsFRBwAMoJInuTtIFfapEt.exe"1⤵
- NTFS ADS
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage