e9dbac6c36fe82464f698d27f981f298ea69e9f82a8e441bd0a4e9906481c7ba | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/12/2023, 21:26

Sharing

Report Analysis Logs

General

Target

f93f06b1015ef3deafa1ba6125f199cb.exe
Size

82KB
MD5

f93f06b1015ef3deafa1ba6125f199cb
SHA1

63ef3da43a7f6c39ed17b57db8c501e6d732e5d7
SHA256

e9dbac6c36fe82464f698d27f981f298ea69e9f82a8e441bd0a4e9906481c7ba
SHA512

ad13107c8c7adcc6624d01a6abb3298a9a02c3750c857eb1a42210f46db9d36bea381a16aeda0fd9a99a9878fa3c376dda632fee850ae3b75b0f3b91779a5b11
SSDEEP

1536:z9vXTLgfDKEc9lBAlQ5q73FF0nub7g5PFRKq1a1j68k:tcSjGlQ5qF1j68k

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2580	f93f06b1015ef3deafa1ba6125f199cb.exe
2580	f93f06b1015ef3deafa1ba6125f199cb.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2580	f93f06b1015ef3deafa1ba6125f199cb.exe
2580	f93f06b1015ef3deafa1ba6125f199cb.exe

C:\Users\Admin\AppData\Local\Temp\f93f06b1015ef3deafa1ba6125f199cb.exe
"C:\Users\Admin\AppData\Local\Temp\f93f06b1015ef3deafa1ba6125f199cb.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads