Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2023, 04:25

General

  • Target

    95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21/95d9c1ff255b52035da3e2ff521f3f0fbb8.exe

  • Size

    269KB

  • MD5

    2387d85c2432208da2710ef9a96c3667

  • SHA1

    5aac61b44c52ba33d5d4a0109c65f3ebc5e63c3b

  • SHA256

    95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21

  • SHA512

    8eeb9113506a4dab777e27370e4b73c70e82890b84435125ab96fa3bd225a0d458b27d9fcb6791a55b785733befb7d7539b056fa89a38d8a1b77365652445f14

  • SSDEEP

    6144:JqB9eU/qEE7MFUMK4wBgFb1TLdO1bgABHMnq3zFGOA:JqB7qEE7FMvwmb1TLs1bgMuq3BbA

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21\95d9c1ff255b52035da3e2ff521f3f0fbb8.exe
    "C:\Users\Admin\AppData\Local\Temp\95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21\95d9c1ff255b52035da3e2ff521f3f0fbb8.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/956-0-0x0000000000400000-0x0000000000453000-memory.dmp

          Filesize

          332KB

        • memory/956-1-0x0000000000360000-0x00000000003AC000-memory.dmp

          Filesize

          304KB

        • memory/956-2-0x0000000000320000-0x0000000000321000-memory.dmp

          Filesize

          4KB

        • memory/956-3-0x0000000000310000-0x0000000000311000-memory.dmp

          Filesize

          4KB

        • memory/956-4-0x0000000000300000-0x0000000000301000-memory.dmp

          Filesize

          4KB

        • memory/956-9-0x0000000002810000-0x0000000002811000-memory.dmp

          Filesize

          4KB

        • memory/956-8-0x00000000002E0000-0x00000000002E1000-memory.dmp

          Filesize

          4KB

        • memory/956-7-0x00000000003D0000-0x00000000003D1000-memory.dmp

          Filesize

          4KB

        • memory/956-6-0x00000000002F0000-0x00000000002F1000-memory.dmp

          Filesize

          4KB

        • memory/956-5-0x00000000003B0000-0x00000000003B1000-memory.dmp

          Filesize

          4KB

        • memory/956-10-0x0000000000330000-0x0000000000331000-memory.dmp

          Filesize

          4KB

        • memory/956-11-0x0000000002800000-0x0000000002802000-memory.dmp

          Filesize

          8KB

        • memory/956-13-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/956-12-0x0000000000630000-0x0000000000631000-memory.dmp

          Filesize

          4KB

        • memory/956-14-0x0000000000610000-0x0000000000611000-memory.dmp

          Filesize

          4KB

        • memory/956-15-0x0000000000880000-0x0000000000881000-memory.dmp

          Filesize

          4KB

        • memory/956-16-0x00000000005F0000-0x00000000005F1000-memory.dmp

          Filesize

          4KB

        • memory/956-19-0x0000000002050000-0x0000000002051000-memory.dmp

          Filesize

          4KB

        • memory/956-23-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

          Filesize

          4KB

        • memory/956-22-0x0000000002070000-0x0000000002071000-memory.dmp

          Filesize

          4KB

        • memory/956-21-0x0000000001FF0000-0x0000000001FF1000-memory.dmp

          Filesize

          4KB

        • memory/956-20-0x0000000002000000-0x0000000002001000-memory.dmp

          Filesize

          4KB

        • memory/956-18-0x0000000000600000-0x0000000000601000-memory.dmp

          Filesize

          4KB

        • memory/956-24-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

          Filesize

          4KB

        • memory/956-17-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/956-25-0x0000000002060000-0x0000000002061000-memory.dmp

          Filesize

          4KB

        • memory/956-26-0x0000000000890000-0x0000000000891000-memory.dmp

          Filesize

          4KB

        • memory/956-27-0x00000000027F0000-0x00000000027F2000-memory.dmp

          Filesize

          8KB

        • memory/956-28-0x0000000002870000-0x00000000028B0000-memory.dmp

          Filesize

          256KB

        • memory/956-29-0x0000000002850000-0x0000000002851000-memory.dmp

          Filesize

          4KB

        • memory/956-30-0x0000000002860000-0x0000000002861000-memory.dmp

          Filesize

          4KB

        • memory/956-31-0x00000000003F0000-0x00000000003F1000-memory.dmp

          Filesize

          4KB

        • memory/956-32-0x00000000002D0000-0x00000000002D1000-memory.dmp

          Filesize

          4KB

        • memory/956-33-0x0000000002830000-0x0000000002831000-memory.dmp

          Filesize

          4KB

        • memory/956-34-0x0000000000400000-0x0000000000453000-memory.dmp

          Filesize

          332KB

        • memory/956-35-0x0000000000360000-0x00000000003AC000-memory.dmp

          Filesize

          304KB

        • memory/956-36-0x0000000002870000-0x00000000028B0000-memory.dmp

          Filesize

          256KB

        • memory/956-37-0x0000000002870000-0x00000000028B0000-memory.dmp

          Filesize

          256KB

        • memory/956-43-0x0000000000400000-0x0000000000453000-memory.dmp

          Filesize

          332KB

        • memory/956-44-0x0000000000400000-0x0000000000453000-memory.dmp

          Filesize

          332KB

        • memory/956-50-0x0000000000400000-0x0000000000453000-memory.dmp

          Filesize

          332KB