Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2023, 02:59

General

  • Target

    7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe

  • Size

    10.0MB

  • MD5

    b42ba04b2dffb672d276205f3aac5d6f

  • SHA1

    72030ed397237c40c98c1d0aa9b6e7b4fafee23c

  • SHA256

    7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948

  • SHA512

    3112ae5ccf0748bf71530849ba099d6264de8c092cac93e074b3770ab1d37802bbc2e1ce3014937886889eebcf07ec659130ef0593bf7c9fd4c00a622fc6b3ec

  • SSDEEP

    196608:s7E5ZaZq4g15kOO/L6NXSREbVSl3Po9QWLGqUOdt+WNt6CJdL0dh4vaz0:62z4h2iKbcl3QGX2RhAhz0

Score
1/10

Malware Config

Signatures

  • Modifies registry class 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe
    "C:\Users\Admin\AppData\Local\Temp\7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    PID:2800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads