6a9e7e76b618ab9a7bbb61aee2bd70b7f32d726c0488658a47eb7c6b7486ec44 | Triage

Analysis

max time kernel
102s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2023, 20:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

PhotoshopPrefsManager.exe
Size

898KB
MD5

15ff8e4be2173e6218f8c21057adf0df
SHA1

1c1e1d88e860cd8f9f29db6346fad2cb738ec0cf
SHA256

6a9e7e76b618ab9a7bbb61aee2bd70b7f32d726c0488658a47eb7c6b7486ec44
SHA512

640da274a6f9fad39341152ae4511dfdbd2945fa273e94dc096be29383d43029d2e28a9dc2fc834c3f502ca0835d767fb0eaf5467b9ed24945c26550704f5c1d
SSDEEP

24576:JAHnh+eWsN3skA4RV1Hom2KXMmHaCngv51:Qh+ZkldoPK8YaCne1

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4616	PhotoshopPrefsManager.exe
4616	PhotoshopPrefsManager.exe
4616	PhotoshopPrefsManager.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4616	PhotoshopPrefsManager.exe
4616	PhotoshopPrefsManager.exe
4616	PhotoshopPrefsManager.exe

C:\Users\Admin\AppData\Local\Temp\PhotoshopPrefsManager.exe
"C:\Users\Admin\AppData\Local\Temp\PhotoshopPrefsManager.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads