Analysis
-
max time kernel
149s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29-12-2023 20:26
Behavioral task
behavioral1
Sample
031078a11c8caa9db2ea54571dccba50.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
031078a11c8caa9db2ea54571dccba50.exe
Resource
win10v2004-20231222-en
4 signatures
150 seconds
General
-
Target
031078a11c8caa9db2ea54571dccba50.exe
-
Size
87KB
-
MD5
031078a11c8caa9db2ea54571dccba50
-
SHA1
3156c5faad8d8c54547cf12700e45c6a1dbd92fe
-
SHA256
79ee1dd25310ead2cb81b390d0d87c6498121ad57754c07ef2c4b712d82ca456
-
SHA512
314729481f576d8440ad349c29639a5c4765384143167cf6d1103be729f84cf319afe3da7dc97c5ee164c024dd91e82414129a8e9aa4e06042e2b9faf32fe041
-
SSDEEP
1536:GccZ5lhNCvL/OeTbERu3jBjeSEArDzDcya14k+B2QcRKzcVvsgOjVP5eTUX9Ib:GccZ34F/ERuVySjrDUyxZcQcRKTjd5e9
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2024-0-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-1-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-2-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-3-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-4-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-5-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-6-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-7-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-8-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-9-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-10-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-11-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-12-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-13-0x0000000000400000-0x0000000000446000-memory.dmp upx behavioral1/memory/2024-14-0x0000000000400000-0x0000000000446000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe 2024 031078a11c8caa9db2ea54571dccba50.exe