Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
22-09-2023 05:35
Static task
static1
Behavioral task
behavioral1
Sample
38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe
Resource
win10v2004-20230915-en
General
-
Target
38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe
-
Size
4.9MB
-
MD5
46634fbf2ef3bb2800f6e63a6933b403
-
SHA1
ef09a7d29a7303facd0872699ad75f46bb0e7b4b
-
SHA256
38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae
-
SHA512
3e5ed73312c7f77bc9b7965417c0295389194b7ec4da50b2de2edd75a76cf84d8aa95c6141da2cebf664a0cc95529870b6b9ea594c4cd0cee0c0c7172d7ff53f
-
SSDEEP
49152:3g/CqVQNXqRRcHcSLuncaSdDKX5tvkdtrMxmTMBPBtloQVf:Q6qVs6cH7LuncaSd85tvkdKkMBjekf
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2160 38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2160 38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe 2160 38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2160 38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe 2160 38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2160 38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe 2160 38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe"C:\Users\Admin\AppData\Local\Temp\38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2160