86cd62bf1decd47d003db28ba8124f841aec6c91507fb0a067130015252634ca | Triage

Analysis

max time kernel
137s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
20/11/2023, 01:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2dc8c736e9fa73a92615de12b71c98dd.exe
Size

4.0MB
MD5

2dc8c736e9fa73a92615de12b71c98dd
SHA1

8636a4e9942e1541a6be6a9c82d3915a561c8a07
SHA256

86cd62bf1decd47d003db28ba8124f841aec6c91507fb0a067130015252634ca
SHA512

5a7711c109342d76b5686b0903b0f50b0bff46ad5ae3012f83a3f793fdb36043e3bc342d015f0ea49adefaad40dacc21c2f97ec9ac31095563149a9593063501
SSDEEP

98304:dXbIrqnIkdMS9/Ifs+SbPU6QB92uuyI3yBTq0f:JIZSD9AIQaut/M0

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
3396	2dc8c736e9fa73a92615de12b71c98dd.exe
3396	2dc8c736e9fa73a92615de12b71c98dd.exe
3396	2dc8c736e9fa73a92615de12b71c98dd.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
3396	2dc8c736e9fa73a92615de12b71c98dd.exe
3396	2dc8c736e9fa73a92615de12b71c98dd.exe
3396	2dc8c736e9fa73a92615de12b71c98dd.exe

C:\Users\Admin\AppData\Local\Temp\2dc8c736e9fa73a92615de12b71c98dd.exe
"C:\Users\Admin\AppData\Local\Temp\2dc8c736e9fa73a92615de12b71c98dd.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads