Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
22/12/2023, 09:07
General
-
Target
7ff9c16b9403e51dd790ebebe3278966.exe
-
Size
376KB
-
MD5
7ff9c16b9403e51dd790ebebe3278966
-
SHA1
0d4fab6ba6e11377a26c63eec04f9e0fd0483e86
-
SHA256
f8332836937e3ade3d5e795af64acf1a2460bf3253dbdb63983290e13008ae7b
-
SHA512
e715928a26a8ba56bc6f1cd5231cee213b84ebab2434d64e1287e021cd723851dc66833f876dc8e881f714270fba166cf4c2b3c138dc7567c07c1a6f23432dde
-
SSDEEP
6144:Wof7DeNUSfGgHCU/2McdfoI/ZX0rYfCzuCCMQZN/OdnFQ8+PHPF53ljgIJ2jXznZ:1YV6MorX7qzuC3QHO9FQVHPF51jgcDn8
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ff9c16b9403e51dd790ebebe3278966.exe"C:\Users\Admin\AppData\Local\Temp\7ff9c16b9403e51dd790ebebe3278966.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
932KB
-
Filesize
932KB