Analysis

  • max time kernel
    190s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/05/2023, 19:24

General

  • Target

    8fdda7e6dc9dbb9a025173d3c33f3b5f7f9bac48f1886cd4f849e078ec487d49.exe

  • Size

    622KB

  • MD5

    50f9585a48865123df9a8ba7023ff01e

  • SHA1

    7acaf58200f96f694e3a0e11f408b2fd49499643

  • SHA256

    8fdda7e6dc9dbb9a025173d3c33f3b5f7f9bac48f1886cd4f849e078ec487d49

  • SHA512

    cbd40cdf88c0e65cf4aad4861c6da0a7ba69ae294df722ac452e0d11be14e106e98233d653c0efb1ff3c41394064691b15ec5f3ad916a2ac736591cf97e7556a

  • SSDEEP

    12288:/C910E1ULnerPmaJ+Ow/TdhmpM1sa3PW+SFGQEnfeyj7:/C//Z+kOdEp9a3KFlEnfe4

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8fdda7e6dc9dbb9a025173d3c33f3b5f7f9bac48f1886cd4f849e078ec487d49.exe
    "C:\Users\Admin\AppData\Local\Temp\8fdda7e6dc9dbb9a025173d3c33f3b5f7f9bac48f1886cd4f849e078ec487d49.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2508

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2508-133-0x0000000002340000-0x0000000002341000-memory.dmp

          Filesize

          4KB

        • memory/2508-134-0x0000000000400000-0x00000000004A1000-memory.dmp

          Filesize

          644KB

        • memory/2508-135-0x0000000002340000-0x0000000002341000-memory.dmp

          Filesize

          4KB