Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    18/09/2023, 23:37

General

  • Target

    f397353694f23c36dc883748200860a764a8301c506978196934022099328e25.exe

  • Size

    9.2MB

  • MD5

    0f415ad3d127392d78fb510173e92969

  • SHA1

    3c0b538544187f7fb92cd0af00abd0752e3bce7f

  • SHA256

    f397353694f23c36dc883748200860a764a8301c506978196934022099328e25

  • SHA512

    37ed62ae277aa729844fc6726851cb48c9afa6f8dee64dffd78d490ccface9049ea44394526c3cf8ea164981cad7f5cfaeac05e33848e303f641eccf4a64df4d

  • SSDEEP

    196608:UkNVhdPHAyqQMyKp1MQLdhfOItDtYp9k1VkYvl:TLMjp1TdhNHp1V9

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f397353694f23c36dc883748200860a764a8301c506978196934022099328e25.exe
    "C:\Users\Admin\AppData\Local\Temp\f397353694f23c36dc883748200860a764a8301c506978196934022099328e25.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2012-0-0x0000000000400000-0x000000000128B000-memory.dmp

    Filesize

    14.5MB

  • memory/2012-1-0x0000000000400000-0x000000000128B000-memory.dmp

    Filesize

    14.5MB

  • memory/2012-2-0x0000000000400000-0x000000000128B000-memory.dmp

    Filesize

    14.5MB

  • memory/2012-3-0x0000000000400000-0x000000000128B000-memory.dmp

    Filesize

    14.5MB

  • memory/2012-5-0x0000000000400000-0x000000000128B000-memory.dmp

    Filesize

    14.5MB