Analysis
-
max time kernel
121s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
31/08/2023, 21:33
General
-
Target
3489076b254a759e483e59c8c2c789f1f4b0b2aa7f13d1173cc971add2a95735.exe
-
Size
3.6MB
-
MD5
5faf6f8a854f4f2c13b1aef9d9c1ffd6
-
SHA1
38db2dd7e5f22dd26929f0afcc0b6bb9cb8a316d
-
SHA256
3489076b254a759e483e59c8c2c789f1f4b0b2aa7f13d1173cc971add2a95735
-
SHA512
ff13ad7a8977a59cbdb8eb3117084b553b9a4f2fbb301982e5af8d485bc8d13ccb995a0a787f61f6c0eaaf731f27330136db979bbfe5160ff5874a23aaa931bc
-
SSDEEP
49152:r0NEbMckrISqE3ozYiHdY2Nu4ijwK6bFwOnUTWYq:rPIv2NuCK6bSoeq
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 5 IoCs
-
Suspicious use of SendNotifyMessage 5 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3489076b254a759e483e59c8c2c789f1f4b0b2aa7f13d1173cc971add2a95735.exe"C:\Users\Admin\AppData\Local\Temp\3489076b254a759e483e59c8c2c789f1f4b0b2aa7f13d1173cc971add2a95735.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.8MB