Analysis
-
max time kernel
146s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29-12-2023 05:18
General
-
Target
8e83d01866a8b320694107e32809933f79e5858e955e1c5188dd2139c6db7516.exe
-
Size
13.6MB
-
MD5
da5936678228a148ca4e3a1ec1194589
-
SHA1
84e9c15dcf64fc3cc58e8e32bf3ae95d6e58baf2
-
SHA256
8e83d01866a8b320694107e32809933f79e5858e955e1c5188dd2139c6db7516
-
SHA512
79c56abc51916d72bd5198385e31ccc1f349a44d0261081b8b6af2730b9c82ee3b6a1ff34fa0261bbedef68acccf82a034d189da17c029a63d931cca9b9887f7
-
SSDEEP
393216:qPwadE5xiPR87N/rn25MJFjrTuSne6JA:TI82ufjrCq
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e83d01866a8b320694107e32809933f79e5858e955e1c5188dd2139c6db7516.exe"C:\Users\Admin\AppData\Local\Temp\8e83d01866a8b320694107e32809933f79e5858e955e1c5188dd2139c6db7516.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage