Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
20-11-2023 10:52
Static task
static1
Behavioral task
behavioral1
Sample
f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe
Resource
win10v2004-20231023-en
General
-
Target
f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe
-
Size
1.9MB
-
MD5
a65d4557406e41039a8a02fabf221798
-
SHA1
0025399d2d5fdbc212c09a05055fbf68bfc59464
-
SHA256
f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b
-
SHA512
ef45b2dfc1569b90721339f035203bc47dab48b691c0eacefb713d6a4a1863e0bc34b413099fe2589c11aef67c2b0cabd8f9fab23cd1b24e65a6b2e3a76bdd46
-
SSDEEP
12288:hJpTZ2csYfKxSj4+/7d8+/7dLP03bjjGWBuPE6fBXv:hJp8cTfKx+4ed8edLP03bjyAuPE6fBf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2372 f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2372 f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe"C:\Users\Admin\AppData\Local\Temp\f1761102c73a3fb4ae1dbf1f073aa82b8196a30f6fa038ad090d262a9ea7e86b.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2372