Overview

overview

3

Static

static

3

4356591ecf...1e.exe

windows7-x64

1

4356591ecf...1e.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 23:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    4356591ecf3ab42c3d13d070c830cf1e.exe

  • Size

    2.6MB

  • MD5

    4356591ecf3ab42c3d13d070c830cf1e

  • SHA1

    bb29e9ea0c38485619790d23f029a55c564836f8

  • SHA256

    c91544cec5b2ba026ff6bc058dbc5217db3d287211a44753adb85e0e3b2e9be0

  • SHA512

    9b9a5bed875f5278cabda7f600cbda88e6b678930b45f372363d47ebae75f3f7353d5d129da5d89911bfa4a21d305f2ced90d7fb5944d2d8fbe3c48b3cb06402

  • SSDEEP

    24576:GfwwPQKeqDemWNbz7zSExRjm+0JB0S/EDkrZW1SRuU4K6QfHOQ7RDSik0dGEMS1w:G01qXKXL0JOS/NZWZUH7dvB9icc71Q1

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4356591ecf3ab42c3d13d070c830cf1e.exe
    "C:\Users\Admin\AppData\Local\Temp\4356591ecf3ab42c3d13d070c830cf1e.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1872

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1872-0-0x00000000025F0000-0x00000000025F1000-memory.dmp

          Filesize

          4KB

          Download

        • memory/1872-5-0x0000000000400000-0x00000000006A3000-memory.dmp

          Filesize

          2.6MB

          Download

        • memory/1872-7-0x00000000025F0000-0x00000000025F1000-memory.dmp

          Filesize

          4KB

          Download