870f655b8d99105a1158ac9641c99ac7a0e2ec29ee762b861f58dbf4155e5a5d

Analysis

max time kernel
142s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2023, 09:01

Target

870f655b8d99105a1158ac9641c99ac7a0e2ec29ee762b861f58dbf4155e5a5d.exe
Size

4.7MB
MD5

c217aec0cc9321bc60371992814d80c1
SHA1

0a8993302f553ef74c0e0c239e9542f7617b9dbd
SHA256

870f655b8d99105a1158ac9641c99ac7a0e2ec29ee762b861f58dbf4155e5a5d
SHA512

9b4f7ec12016954da3477ec86624f1fe088a1c25c4c775821e3d685ec8def34a2a539adb4a9ab4291677219130b0843cc92c0cb40b8d892fa8bcb543560b5ae2
SSDEEP

98304:bebHqaNrra2LhdBZOJihR7G6x8QlMiqhD9Ezkxy+0gMZKvF067w8PT:bebKataJihRxPqhDo+Movq8PT

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2644	870f655b8d99105a1158ac9641c99ac7a0e2ec29ee762b861f58dbf4155e5a5d.exe

C:\Users\Admin\AppData\Local\Temp\870f655b8d99105a1158ac9641c99ac7a0e2ec29ee762b861f58dbf4155e5a5d.exe
"C:\Users\Admin\AppData\Local\Temp\870f655b8d99105a1158ac9641c99ac7a0e2ec29ee762b861f58dbf4155e5a5d.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2644