Analysis
-
max time kernel
146s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2023, 17:47
Static task
static1
Behavioral task
behavioral1
Sample
75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd.exe
Resource
win10v2004-20230831-en
General
-
Target
75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd.exe
-
Size
129KB
-
MD5
7670fcaf56e265dd8678b8eb356d8cff
-
SHA1
62ef39e02bfc8346e040ab3b5c9c65e318215c5d
-
SHA256
75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd
-
SHA512
acd87b8a5a1c8a320d259670d486c668ec2e38f6f1d7f029bf9b4010d8c3b00972debde6f45b386798b9766b02998e7de650bb555990d85fa5724df3db081f38
-
SSDEEP
3072:Qu/guB0byemiSEywPlPERM322sbwgyqU3RJOsm/Tf:Qu/guB0byemiSEywPlPERM32xwgyfJmz
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2780 75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2780 75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd.exe"C:\Users\Admin\AppData\Local\Temp\75dc16702d260c8f77019c5a1f6d5906a693496b7ace234826df730611598ecd.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2780