Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 01:16
Static task
static1
Behavioral task
behavioral1
Sample
7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe
Resource
win10v2004-20231215-en
General
-
Target
7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe
-
Size
2.0MB
-
MD5
9664816d58664c8f0427933691679c00
-
SHA1
5db72aae29aae094add77db00bbcd626d5cfd416
-
SHA256
7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f
-
SHA512
de7db783f7f45d652bcea730b1bcb3cffeb5d56e36e660cf78b7785989b1aea67c766c1d29b17b1e4113aefeaa4a20cadf40a9af0ff971e74e299cf696a93db4
-
SSDEEP
49152:kBwBL5v8FmwmMi69+OOPebbGob0JbbXgpslZqEd4Lr:jvvcmx6AOmevGI0JbQAZd4/
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4956 7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe 4956 7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4956 7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe"C:\Users\Admin\AppData\Local\Temp\7dc1cfefe659c421a17d11458c2cb7f3338c61cbffc2d705ca3434d223d6cb2f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
PID:4956