Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12-10-2023 04:59
General
-
Target
诺诺发票_2023-09-22.exe
-
Size
5.1MB
-
MD5
39deff4f51e7ac0e5445cf16424f6fc3
-
SHA1
f59ffeae598788e0ded72e37b83d66d36f2cafad
-
SHA256
2bae85a6b77ed822d9aa91b2aa812f84a4b14a4461496c4583bc8a28bab28eb1
-
SHA512
e9765881d3c101f55b3bd80cc67f1198e30fc237fe46b368c102eb560b10a01e3b01e1a4f0cc02005556f8ca92ddcc89e4c403f54775c34a6179fd9ab07a5b76
-
SSDEEP
98304:+pZzfVy1kmWf84ffhIjGcYoj9ghi1RebM390bYVO9mjcp8Qm/SAKy+gkJjeg+:+pZSE8FRYojD390bYVxjw8X/S/t+
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\诺诺发票_2023-09-22.exe"C:\Users\Admin\AppData\Local\Temp\诺诺发票_2023-09-22.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage