Analysis
-
max time kernel
151s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
29-06-2023 20:17
General
-
Target
edba6b9861e17f5ef88dcde120cd99ac519b5309ca080fdd6aeb6ca4d75a334d.exe
-
Size
5.0MB
-
MD5
6d5ea4c08332244b12ac578bd4a0e6b9
-
SHA1
ffe10ed65c52515b641c58d7a4962e902d18204a
-
SHA256
edba6b9861e17f5ef88dcde120cd99ac519b5309ca080fdd6aeb6ca4d75a334d
-
SHA512
76b89b53df5adc2ec52de79e537927cbfe5166d7194354a08094abe79664e0a4a5edf2f17b8f157122d47dbcf126e2fff4bf90a8972e38c7fe2d5a47c2a03b4b
-
SSDEEP
98304:hcXi5U5/SfWyRY5Jo5M4/EIFq3btqQSFk8wdOBrBp8wGXJBXFJ9bg+0nta6ytw37:zU5W3IqYwGXJBXbK+0nI6Qw3rth5WcRY
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\edba6b9861e17f5ef88dcde120cd99ac519b5309ca080fdd6aeb6ca4d75a334d.exe"C:\Users\Admin\AppData\Local\Temp\edba6b9861e17f5ef88dcde120cd99ac519b5309ca080fdd6aeb6ca4d75a334d.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx