cc320b76f0050330eeea110301ffd723686efc95ffdd530ee625d56cf2569c90 | Triage

Analysis

max time kernel
150s
max time network
160s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 04:38

Sharing

Report Analysis Logs

General

Target

Daily Journal 4.3/journal.exe
Size

8.4MB
MD5

5f2ae5c30893760af851f6d6611fb47a
SHA1

23660035c4efe74b10c274e7c1d3cb6738bdc920
SHA256

ec8aa2c3712de157e0d025020edd12ee310bd30ddf3d83f7667c1e91fa02adff
SHA512

aa7babe7decf267ef4af3d17ccc041b98afe03ba1d3a44bbe2d2e3055004a67c08f91c0d639c7d779821ebd78d34c81a30531f05bc5fd88be62a679eadde3983
SSDEEP

196608:56/EIUhNbGdaQxIf8DRWU6kXLmd7TL6t+ubt:5YIhN6daQzaed

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1260	journal.exe
1260	journal.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
1260	journal.exe
1260	journal.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1260	journal.exe

C:\Users\Admin\AppData\Local\Temp\Daily Journal 4.3\journal.exe
"C:\Users\Admin\AppData\Local\Temp\Daily Journal 4.3\journal.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1260-0-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1260-1-0x0000000000400000-0x0000000000C9C000-memory.dmp

Filesize
8.6MB

Download
memory/1260-3-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download