Analysis
-
max time kernel
143s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
05/07/2023, 19:48
Static task
static1
Behavioral task
behavioral1
Sample
eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe
Resource
win10v2004-20230703-en
General
-
Target
eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe
-
Size
140KB
-
MD5
83d4e93e4ca88af2a0fd3d1b12a2d819
-
SHA1
8713dad680bb8ec1b9b3e891b0627780a7249069
-
SHA256
eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5
-
SHA512
ba46ff136b4f639afeff01e9bfab2b8540ecbc5577f4c580f1d474a7f18c857a6a1c05901a806bc9a2223d54996dad17fefe38091ebed60f6779c68cd89e7a3d
-
SSDEEP
3072:I4y/advMRJry2Y3p/LAib3CHmuOylktr4lfoUgvqwafSoieB:seVmGElktr4ngvUfSoi
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1304 eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe 1304 eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1304 eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe 1304 eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe"C:\Users\Admin\AppData\Local\Temp\eeae43e415acfc829119b1499b53482a1c98b8ed3002366b809edd27a93a35a5.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1304