Analysis
-
max time kernel
156s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 04:25
Static task
static1
Behavioral task
behavioral1
Sample
95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21/95d9c1ff255b52035da3e2ff521f3f0fbb8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21/95d9c1ff255b52035da3e2ff521f3f0fbb8.exe
Resource
win10v2004-20230915-en
General
-
Target
95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21/95d9c1ff255b52035da3e2ff521f3f0fbb8.exe
-
Size
269KB
-
MD5
2387d85c2432208da2710ef9a96c3667
-
SHA1
5aac61b44c52ba33d5d4a0109c65f3ebc5e63c3b
-
SHA256
95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21
-
SHA512
8eeb9113506a4dab777e27370e4b73c70e82890b84435125ab96fa3bd225a0d458b27d9fcb6791a55b785733befb7d7539b056fa89a38d8a1b77365652445f14
-
SSDEEP
6144:JqB9eU/qEE7MFUMK4wBgFb1TLdO1bgABHMnq3zFGOA:JqB7qEE7FMvwmb1TLs1bgMuq3BbA
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3676 95d9c1ff255b52035da3e2ff521f3f0fbb8.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3676 95d9c1ff255b52035da3e2ff521f3f0fbb8.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3676 95d9c1ff255b52035da3e2ff521f3f0fbb8.exe 3676 95d9c1ff255b52035da3e2ff521f3f0fbb8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21\95d9c1ff255b52035da3e2ff521f3f0fbb8.exe"C:\Users\Admin\AppData\Local\Temp\95d9c1ff255b52035da3e2ff521f3f0fbb8be117ef6b1e64723e825c79b0de21\95d9c1ff255b52035da3e2ff521f3f0fbb8.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3676