Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2024, 15:42

General

  • Target

    943474874/cooltray4.3/CoolTrayTest.exe

  • Size

    600KB

  • MD5

    9da7b94db0cf89a7c4e73653539ced24

  • SHA1

    854ad49f7b9e910ad1789c0bba3e5ca894d40101

  • SHA256

    fd0d9ae516853838e8777ec6bffc710c5743da59c9f1e41a6acf6adf7225ba7e

  • SHA512

    02d990bc2911b9b3e4da8d78e45cad0b0c994e9489c10f340d5ed1d97aee9d5b0b85b34a5c23aded963c926ef0dc71478b01e78c7ecec224aca9345e7e1bf062

  • SSDEEP

    12288:o1izyJ7LOHnO6O9k32GUFHigKHB0ei7MKs:0HJWO6YNdFH6HqJg

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 12 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\943474874\cooltray4.3\CoolTrayTest.exe
    "C:\Users\Admin\AppData\Local\Temp\943474874\cooltray4.3\CoolTrayTest.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3020

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3020-0-0x0000000000220000-0x0000000000221000-memory.dmp

          Filesize

          4KB

        • memory/3020-1-0x0000000000400000-0x000000000049D000-memory.dmp

          Filesize

          628KB

        • memory/3020-3-0x0000000000220000-0x0000000000221000-memory.dmp

          Filesize

          4KB