Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
08-06-2023 08:14
Behavioral task
behavioral1
Sample
58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exe
-
Size
232KB
-
MD5
61cd641b7a4feccbbedb828941901fa0
-
SHA1
bee37f01726ba9faa793058a121caf758867b629
-
SHA256
58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d
-
SHA512
a2dd50359643adc9d5cd02dfa171e552b5f5c18a50499cf9ea02a3caa44a93a24d2eadbca4ca138fe722db9773a2d2614285e6070a5145e686624ad080eef94b
-
SSDEEP
6144:iB8pRFGJSRSs7/62JE4FgORTy2wCB20E/wcFwDKMiD9HR:iCpawD69H
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exepid process 1180 58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exepid process 1180 58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exe"C:\Users\Admin\AppData\Local\Temp\58a1d49fe1e152f8acebd35ecf04144cdd794cc21169c67cbab7def4cd31123d.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1180-133-0x0000000010000000-0x0000000010008000-memory.dmpFilesize
32KB