7e40b472a31408e80587a6619687f41bdb94bcddfe9daf429fbe5dc7fe5f9991 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 04:49

Sharing

Report Analysis Logs

General

Target

677e68dba09bbc46cefa73fb8d8f41b5.exe
Size

13.3MB
MD5

677e68dba09bbc46cefa73fb8d8f41b5
SHA1

8d109368883c0dcaf912442aca388b00da80ed74
SHA256

7e40b472a31408e80587a6619687f41bdb94bcddfe9daf429fbe5dc7fe5f9991
SHA512

ff05fc5f485b2fb257b48e59658d1036a8c0fd5b25503cac182f08e7cb570fe9237db7b916e5765e29ec27ddaa09536c81d737b53d3866272be0dea3a4db4413
SSDEEP

393216:xI6pS3lzOjd+NZVH4QFse4DKMERUNtu3M:xI6EVzsdS14Qhs2KNY3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3044	677e68dba09bbc46cefa73fb8d8f41b5.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3044	677e68dba09bbc46cefa73fb8d8f41b5.exe
3044	677e68dba09bbc46cefa73fb8d8f41b5.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
3044	677e68dba09bbc46cefa73fb8d8f41b5.exe
3044	677e68dba09bbc46cefa73fb8d8f41b5.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3044	677e68dba09bbc46cefa73fb8d8f41b5.exe
3044	677e68dba09bbc46cefa73fb8d8f41b5.exe

C:\Users\Admin\AppData\Local\Temp\677e68dba09bbc46cefa73fb8d8f41b5.exe
"C:\Users\Admin\AppData\Local\Temp\677e68dba09bbc46cefa73fb8d8f41b5.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads