Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    15/11/2023, 11:23

General

  • Target

    Sourceforge_1300.exe

  • Size

    36KB

  • MD5

    d2e8efbc148294d4cead1629c58e240f

  • SHA1

    17a4c2bbc5fb8b878b2551bcbba548dee7109453

  • SHA256

    9f63ad6c5ade8921ed86f6e1eb69eef8fc009011e38750285f7bc71b45777a16

  • SHA512

    79802098279e473c2f59702a7593f8afacdf98b3fe85b10f28c42c01a1a9bd3ec93a3586e8c0e633e2d2228648a5709ae5a0ee9701f152d090a5d658ff1e79e8

  • SSDEEP

    384:rKvA96u7w96u75zYKZeko0Y4oVFDvqVE1V/:Xo5z1FoRLGo/

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Sourceforge_1300.exe
    "C:\Users\Admin\AppData\Local\Temp\Sourceforge_1300.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2284

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2284-0-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

          Filesize

          9.6MB

        • memory/2284-1-0x0000000002120000-0x00000000021A0000-memory.dmp

          Filesize

          512KB

        • memory/2284-2-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

          Filesize

          9.6MB

        • memory/2284-3-0x0000000002120000-0x00000000021A0000-memory.dmp

          Filesize

          512KB

        • memory/2284-4-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

          Filesize

          9.6MB

        • memory/2284-5-0x0000000002120000-0x00000000021A0000-memory.dmp

          Filesize

          512KB

        • memory/2284-6-0x0000000002120000-0x00000000021A0000-memory.dmp

          Filesize

          512KB