Analysis
-
max time kernel
107s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
31-05-2023 04:42
General
-
Target
f5cd2a5534d32df793f6e75367fbb9fb312eaadaf6f9b6e84656bcb56fd5f851.exe
-
Size
995KB
-
MD5
90a4b34b077f36da0d1ed5dd05599548
-
SHA1
6c103ca72d878f7818f0c8a5b34b593d5175fbf3
-
SHA256
f5cd2a5534d32df793f6e75367fbb9fb312eaadaf6f9b6e84656bcb56fd5f851
-
SHA512
abdef552577b77c7cfaa87ef846ccc042094e13599982eea48f69aa590e94f4ba65cccebdff8f96a884cf3ad044524c776870cdf96cec32277de1c23ca1764f5
-
SSDEEP
24576:xc2ryNv5aXxUG23RSjbQlQyYq5Xyqo1MNi3NmsJrd/UyKbe+6Akl9GnabxWH:NryjSxM3RcbgYUWMNi9msJrLU6BXYH
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 8 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5cd2a5534d32df793f6e75367fbb9fb312eaadaf6f9b6e84656bcb56fd5f851.exe"C:\Users\Admin\AppData\Local\Temp\f5cd2a5534d32df793f6e75367fbb9fb312eaadaf6f9b6e84656bcb56fd5f851.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage