Analysis

  • max time kernel
    151s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 02:36

General

  • Target

    d4a434efe9231943971a8080f8a7c455b6148a3898bad68fae3a1ab866974a97.exe

  • Size

    2.3MB

  • MD5

    e2f3905fccc9f7da2da3e96c75540577

  • SHA1

    c455d45b9f697a913354abd384d32ed64234058f

  • SHA256

    d4a434efe9231943971a8080f8a7c455b6148a3898bad68fae3a1ab866974a97

  • SHA512

    693e41d63e0572b32883cfc72160d630c5ba3a2ea7e15f66512efad14c42b1cda1c99404c149e6263d24b7e7eb07124626bc06e35b1df2299ba420c83b221972

  • SSDEEP

    49152:MLCPf+3BNJU0ObmWVidhLfKTXTgY3UJ7n:MLCPfgBU0kZKhLf4367n

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d4a434efe9231943971a8080f8a7c455b6148a3898bad68fae3a1ab866974a97.exe
    "C:\Users\Admin\AppData\Local\Temp\d4a434efe9231943971a8080f8a7c455b6148a3898bad68fae3a1ab866974a97.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2144-0-0x00000000023F0000-0x00000000023F1000-memory.dmp

    Filesize

    4KB

  • memory/2144-2-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-1-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-4-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-6-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-8-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-10-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-14-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-12-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-16-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-18-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-20-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-22-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-24-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-26-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-28-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-30-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-32-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-36-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-34-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-38-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-40-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-42-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-44-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-46-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-48-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-50-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-52-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-54-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-56-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-58-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-60-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-62-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-64-0x00000000025C0000-0x00000000025F6000-memory.dmp

    Filesize

    216KB

  • memory/2144-241-0x00000000023F0000-0x00000000023F1000-memory.dmp

    Filesize

    4KB