Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    22-09-2023 05:35

General

  • Target

    38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe

  • Size

    4.9MB

  • MD5

    46634fbf2ef3bb2800f6e63a6933b403

  • SHA1

    ef09a7d29a7303facd0872699ad75f46bb0e7b4b

  • SHA256

    38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae

  • SHA512

    3e5ed73312c7f77bc9b7965417c0295389194b7ec4da50b2de2edd75a76cf84d8aa95c6141da2cebf664a0cc95529870b6b9ea594c4cd0cee0c0c7172d7ff53f

  • SSDEEP

    49152:3g/CqVQNXqRRcHcSLuncaSdDKX5tvkdtrMxmTMBPBtloQVf:Q6qVs6cH7LuncaSd85tvkdKkMBjekf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe
    "C:\Users\Admin\AppData\Local\Temp\38511ad5444ecb10be88e015e2edcd8816df8329743d40f2f115c66115fbe4ae.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads