Analysis
-
max time kernel
188s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
14-10-2023 01:41
General
-
Target
92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe
-
Size
1.2MB
-
MD5
0b284982f79548729fe500725b110b11
-
SHA1
2d1e93143e2b66405100af36d8a0681983fd1736
-
SHA256
92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2
-
SHA512
0a8879b95701e0d79612b907470e59bd607c3b169eda54a04b54222fce6338be9e101fc4983ba6dc1f1b89005346d24da8dcec945dd8606906ebc994bfd12d3e
-
SSDEEP
24576:87og81OfqZ/eiq5YUvJtsNbaaXEektwzl3NLOlQDa2VGVvn9l:88QgHkS/OlUaFh
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe"C:\Users\Admin\AppData\Local\Temp\92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx