Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
16-08-2023 08:06
Static task
static1
Behavioral task
behavioral1
Sample
c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe
Resource
win10v2004-20230703-en
General
-
Target
c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe
-
Size
161KB
-
MD5
8eabd71e3cdb2a77aa6170d3cf8e34fb
-
SHA1
f52e16e4bba6ced987837c47aad36012098521e1
-
SHA256
c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1
-
SHA512
dbb30d402027337dba08fb3344ffb0ebecfd9d47116fac33395b71e1a2f63254ea5d16668fcff41b29115ccb2fd5207e600acef97d8969a0bc3a381260a34bdf
-
SSDEEP
768:x5PNRsJLUkPMtGqBFaAxl2DHzVRzYP3NzUeeTNbO6+MaS:nPsVUkPMtGSpxwHzY1kTNbOpb
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1316 c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe 1316 c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1316 c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe 1316 c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe"C:\Users\Admin\AppData\Local\Temp\c93bfc9ae939a187356df95cebfdd5716cb21d1831d66d3816862b2ace50bea1.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1316