Analysis
-
max time kernel
61s -
max time network
67s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2023, 16:00
Static task
static1
Behavioral task
behavioral1
Sample
[Premium - Premium] [[email protected]].txt
Resource
win7-20231023-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
[Premium - Premium] [[email protected]].txt
Resource
win10v2004-20231023-en
1 signatures
150 seconds
General
-
Target
[Premium - Premium] [[email protected]].txt
-
Size
1KB
-
MD5
1b0d9d4598a3ae5dc3833b8940145821
-
SHA1
1e35d62acd445ff2ccc66df358c45bd04d39b569
-
SHA256
f366bd167aff613b6e14664d70b2d9881ba00b831f7396f0c30b4d93aaa04034
-
SHA512
49b5d981ade211a5b456e1621fa16a390a7075f8b96b345ee6ee85d75293c5a37e1a132e2ade4249ef6bb7e549621e1bbb71092c6e8434b0088d3fbc543bca77
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4720 NOTEPAD.EXE
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\[Premium - Premium] [[email protected]].txt"1⤵
- Suspicious use of FindShellTrayWindow
PID:4720