Analysis

  • max time kernel
    283s
  • max time network
    395s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2023 08:04

General

  • Target

    b.exe

  • Size

    889KB

  • MD5

    03c469798bf1827d989f09f346ce95f7

  • SHA1

    05e491bc1b8fbfbfdca24b565f2464137f30691e

  • SHA256

    de87c8713fac002b0b0a0f9b02c4e3ebcccf65282a22f5ab5912a9da00f35c2a

  • SHA512

    d95aed75dd7b2470d4e5052b4b494ad9efbb9eee42c63cf0b38f1d0275ff7b1bb8ee4cbc69d1bb219dbbf33ad3b01cea97f87fa8fe69be7f943aa4417a603238

  • SSDEEP

    24576:mjSsPIqS9jL0rJ3n770E9d8qTtE4n4CucuH:GzyH0ZOqTGQ4CDu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b.exe
    "C:\Users\Admin\AppData\Local\Temp\b.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3816-0-0x0000000004B70000-0x0000000006957000-memory.dmp

    Filesize

    29.9MB

  • memory/3816-2-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/3816-3-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/3816-4-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/3816-5-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/3816-7-0x0000000004B70000-0x0000000006957000-memory.dmp

    Filesize

    29.9MB

  • memory/3816-6-0x0000000000910000-0x0000000000911000-memory.dmp

    Filesize

    4KB

  • memory/3816-9-0x0000000000930000-0x0000000000931000-memory.dmp

    Filesize

    4KB

  • memory/3816-8-0x0000000000920000-0x0000000000921000-memory.dmp

    Filesize

    4KB

  • memory/3816-12-0x0000000004B70000-0x0000000006957000-memory.dmp

    Filesize

    29.9MB

  • memory/3816-13-0x0000000000940000-0x0000000000941000-memory.dmp

    Filesize

    4KB