559147eab75bae021a64a64c5f5442d561b5f8dea16996a7be13731122d7b03e | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
15-10-2023 17:16

Sharing

Report Analysis Logs

General

Target

Lightshot (1).exe
Size

907KB
MD5

f014f091e2ae82895d06bc8871934e36
SHA1

e008535eea8ad084a6f0415bc5658ea4a491de3d
SHA256

559147eab75bae021a64a64c5f5442d561b5f8dea16996a7be13731122d7b03e
SHA512

22112465f110759d2386d951620959602c849969aa9175b77a4cefb2482d16c466954fcdc5d1af708beffae183badd768449f90d8e6402be1d74abd641ca826d
SSDEEP

24576:fGzl9+a4Ne1nEFI56xU+0IdY2Zv952uetfbFEzP4UFhORjt:f+tOWnEFZR0El0JEzQAhw5

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2264	Lightshot (1).exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
2264	Lightshot (1).exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2264	Lightshot (1).exe

C:\Users\Admin\AppData\Local\Temp\Lightshot (1).exe
"C:\Users\Admin\AppData\Local\Temp\Lightshot (1).exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads