Analysis
-
max time kernel
145s -
max time network
62s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 02:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2459e1900cac137e612896ed61f70921.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2459e1900cac137e612896ed61f70921.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
2459e1900cac137e612896ed61f70921.exe
-
Size
684KB
-
MD5
2459e1900cac137e612896ed61f70921
-
SHA1
ea5aeaf2ae9b456e6a58f6dcb21e7fa2e07efcd1
-
SHA256
dd3e049de3f63222e66931eda2f2e12d979e9833bcf2371f72db53dcf0fd0991
-
SHA512
2b9a770eb5d6a7abacd76c92731ad4148e2541c079415e9bcb70a1ed82cbf86781e34f0317b38a4d093b603871c2923c8daec6a45c0774516afddfdb263ad543
-
SSDEEP
12288:j6/NLMIirGyHoFk1lOW45zfMWHohYTrmxDDndVOBKmvh3as:j6VedoFkla5zk00PDjzOUmK
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3228 2459e1900cac137e612896ed61f70921.exe 3228 2459e1900cac137e612896ed61f70921.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3228 2459e1900cac137e612896ed61f70921.exe 3228 2459e1900cac137e612896ed61f70921.exe