Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 17:01

General

  • Target

    SBCL_ORF-AustriaSat_Bulsatcom_Canalsat_CNL_29022012/SBCL v1.1b.exe

  • Size

    761KB

  • MD5

    aa1479267c9abf6bb5c89fad42aa1cce

  • SHA1

    a4fb32e593d79b7171673d0775b4571d2d06d6d2

  • SHA256

    d5bad8f825c7b2046f66e44b52e29cd04be35a570800c2739cbb6105dce496ac

  • SHA512

    2764477a2cea10d167a50d755146a31311e05df68ee8dcb50107779b2010bdcb0c71c156c2a07c8ddf1e23f4067711c80a108acbd09166d71ad3e090d9aa32ea

  • SSDEEP

    12288:lZBr9JWD4ju1dLcFrtSmQ5CiwNKCr5VnUUt8V1r0VcXzqSBnHXLb:tRJZu1dLchtSLtwMmt8LPjBBHX

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SBCL_ORF-AustriaSat_Bulsatcom_Canalsat_CNL_29022012\SBCL v1.1b.exe
    "C:\Users\Admin\AppData\Local\Temp\SBCL_ORF-AustriaSat_Bulsatcom_Canalsat_CNL_29022012\SBCL v1.1b.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1684-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/1684-1-0x0000000003260000-0x0000000003454000-memory.dmp

    Filesize

    2.0MB

  • memory/1684-3-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/1684-2-0x0000000061C40000-0x0000000061F24000-memory.dmp

    Filesize

    2.9MB

  • memory/1684-4-0x0000000000400000-0x00000000004C8000-memory.dmp

    Filesize

    800KB

  • memory/1684-5-0x0000000003260000-0x0000000003454000-memory.dmp

    Filesize

    2.0MB