Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 11:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
16c9a94100d0b06a8814a7d3f8e6ef96.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
16c9a94100d0b06a8814a7d3f8e6ef96.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
16c9a94100d0b06a8814a7d3f8e6ef96.exe
-
Size
2.9MB
-
MD5
16c9a94100d0b06a8814a7d3f8e6ef96
-
SHA1
c6efec60112539486e22f5ae303a0d1618e0b5e8
-
SHA256
a069feedb7cda2592701eeaf5baa9a217c8ede7b83b6f9ed7c0d2281a73fb62a
-
SHA512
9bf206157424d38628d9244bf73a9e231f5b1f962fe276c27700390a9d762b4e309914525a19203d2e298ebdea6984b6d60c0bbe82d6848bde04a8c42297d872
-
SSDEEP
24576:GSTiNOlSnK9LSUIDhjjKeZDf1na9BeSe/dDV6TjOC6PRIjUpQ0TPC3uisMYOMfNR:ncKe1Za9ISox+OCr13uisg5KZGTWJ
Score
1/10
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main 16c9a94100d0b06a8814a7d3f8e6ef96.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2356 16c9a94100d0b06a8814a7d3f8e6ef96.exe 2356 16c9a94100d0b06a8814a7d3f8e6ef96.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2356 16c9a94100d0b06a8814a7d3f8e6ef96.exe 2356 16c9a94100d0b06a8814a7d3f8e6ef96.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2356 16c9a94100d0b06a8814a7d3f8e6ef96.exe 2356 16c9a94100d0b06a8814a7d3f8e6ef96.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\16c9a94100d0b06a8814a7d3f8e6ef96.exe"C:\Users\Admin\AppData\Local\Temp\16c9a94100d0b06a8814a7d3f8e6ef96.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2356