86cd62bf1decd47d003db28ba8124f841aec6c91507fb0a067130015252634ca | Triage

Analysis

max time kernel
122s
max time network
139s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
02/11/2023, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

tmp.exe
Size

4.0MB
MD5

2dc8c736e9fa73a92615de12b71c98dd
SHA1

8636a4e9942e1541a6be6a9c82d3915a561c8a07
SHA256

86cd62bf1decd47d003db28ba8124f841aec6c91507fb0a067130015252634ca
SHA512

5a7711c109342d76b5686b0903b0f50b0bff46ad5ae3012f83a3f793fdb36043e3bc342d015f0ea49adefaad40dacc21c2f97ec9ac31095563149a9593063501
SSDEEP

98304:dXbIrqnIkdMS9/Ifs+SbPU6QB92uuyI3yBTq0f:JIZSD9AIQaut/M0

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2380	tmp.exe
2380	tmp.exe
2380	tmp.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
2380	tmp.exe
2380	tmp.exe
2380	tmp.exe

C:\Users\Admin\AppData\Local\Temp\tmp.exe
"C:\Users\Admin\AppData\Local\Temp\tmp.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads