8258a7bfdbb2e36d0112dc96fef0b2cdabed4ede5a2a0d248bc0a10f0f81601c | Triage

Analysis

max time kernel
147s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 20:04

Sharing

Report Analysis Logs

General

Target

0f9e31fbf0465fecc091f21a28f8d4b2.exe
Size

3.0MB
MD5

0f9e31fbf0465fecc091f21a28f8d4b2
SHA1

4c6b12a0d8e08da90b18147c7c06664c49dce7f3
SHA256

8258a7bfdbb2e36d0112dc96fef0b2cdabed4ede5a2a0d248bc0a10f0f81601c
SHA512

858136b0c7da5bd6c7781afda4099558366f3cdd2db0242190c21a074b778c8e9fa0cf1faaa2c55d4f7cc613be80be0545c80ac7d0ed577db29a8e783eb3f343
SSDEEP

49152:EauV+aC45SCr5Z0X7CDBO2sxsPiF4Z3I2aYuPt:EdctCDBKsaeZ37a7t

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4024	0f9e31fbf0465fecc091f21a28f8d4b2.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4024	0f9e31fbf0465fecc091f21a28f8d4b2.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4024	0f9e31fbf0465fecc091f21a28f8d4b2.exe
4024	0f9e31fbf0465fecc091f21a28f8d4b2.exe

C:\Users\Admin\AppData\Local\Temp\0f9e31fbf0465fecc091f21a28f8d4b2.exe
"C:\Users\Admin\AppData\Local\Temp\0f9e31fbf0465fecc091f21a28f8d4b2.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4024-0-0x0000000000DB0000-0x0000000000DB1000-memory.dmp

Filesize
4KB

Download
memory/4024-5-0x0000000000400000-0x0000000000703000-memory.dmp

Filesize
3.0MB

Download
memory/4024-7-0x0000000000DB0000-0x0000000000DB1000-memory.dmp

Filesize
4KB

Download