Analysis

  • max time kernel
    187s
  • max time network
    196s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/04/2023, 20:19

General

  • Target

    DimScreen.exe

  • Size

    34KB

  • MD5

    bff6e70793e9fa371d138ca8373a92ea

  • SHA1

    667a9d5dd48efd054f33d44b244deb4b1044a74c

  • SHA256

    7a64290df640678f4c4186edf130e8392c849f3341c343f0fe77b0756c205692

  • SHA512

    c2b513880577d172eaf51891ef63bc1082ad2eda80fd5531fc1b3af47543a668c1ddd00520bce3fac84b1c103e98b4f61c736d9aa95de52e510753aadac97650

  • SSDEEP

    384:PnLbbxvm4N8Tkvwnwq6uIzpVun4Ib4dKv0+R+zFz8C4GECL9zBA5zfzpVun4I:PdVrzpVun4IcdD+4z2iB8zfzpVun4I

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DimScreen.exe
    "C:\Users\Admin\AppData\Local\Temp\DimScreen.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1516-133-0x00000000000B0000-0x00000000000BE000-memory.dmp

    Filesize

    56KB

  • memory/1516-134-0x00000000050C0000-0x0000000005664000-memory.dmp

    Filesize

    5.6MB

  • memory/1516-135-0x0000000004A60000-0x0000000004AF2000-memory.dmp

    Filesize

    584KB

  • memory/1516-136-0x0000000004C20000-0x0000000004C2A000-memory.dmp

    Filesize

    40KB

  • memory/1516-137-0x0000000004C60000-0x0000000004C70000-memory.dmp

    Filesize

    64KB

  • memory/1516-138-0x0000000004C60000-0x0000000004C70000-memory.dmp

    Filesize

    64KB

  • memory/1516-139-0x0000000004C60000-0x0000000004C70000-memory.dmp

    Filesize

    64KB

  • memory/1516-140-0x0000000004C60000-0x0000000004C70000-memory.dmp

    Filesize

    64KB