Overview

overview

3

Static

static

3

temp/Lightshot.dll

windows7-x64

3

temp/Lightshot.dll

windows10-2004-x64

1

temp/Lightshot.exe

windows7-x64

1

temp/Lightshot.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    48s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-11-2023 13:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    temp/Lightshot.exe

  • Size

    487KB

  • MD5

    1e1c83b9680029ad4a9f8d3b3ac93197

  • SHA1

    fa7b69793454131a5b21b32867533305651e2dd4

  • SHA256

    0b899508777d7ed5159e2a99a5eff60c54d0724493df3d630525b837fa43aa51

  • SHA512

    fe6f8df3dbbcc7535ead60028ec3e45801a33ccc81c9137b2288bc0d18be42379564c907eb406ce9491f46930690efa9a86a9f6506414992b5dba75adb3d1136

  • SSDEEP

    12288:cl1dT6lwApgXttZmPdsfkmDU3pRQa/JSQE:Q1d0wVmPdsfkP3zQa/JSH

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\temp\Lightshot.exe
    "C:\Users\Admin\AppData\Local\Temp\temp\Lightshot.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3064-0-0x00000000746E0000-0x0000000074B6B000-memory.dmp

    Filesize

    4.5MB

    Download