Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16/08/2023, 03:23
Behavioral task
behavioral1
Sample
cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe
Resource
win7-20230712-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe
Resource
win10v2004-20230703-en
3 signatures
150 seconds
General
-
Target
cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe
-
Size
9.3MB
-
MD5
23e4a86b70f6f83698b76bfe439a934d
-
SHA1
699382f38e79cfc1d2a8e31bc1b16a210be6cc57
-
SHA256
cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82
-
SHA512
f4b015a301c731398862f85af2a67159820cfc65ddae8e63e1496269d1e22e4576e8153d6a828723cf59b15839008ad9b55d7507e4b23c4886a83f0603d37358
-
SSDEEP
196608:UrKy3oMRloERX+jDQVjoEgOytGuUyOuMkGCJ6mBj4WBo5YE1T9W:UrKcuEp+X2E5OtVyNMvAn+WBuY+
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2968 cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe 2968 cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2968 cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2968 cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe 2968 cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe"C:\Users\Admin\AppData\Local\Temp\cfdf9ae01d87ebf5f49f127a65fd5ac9ef7bf1d24ef80980c2d0436ec40dcb82.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2968