Overview

overview

3

Static

static

3

c9a040ab8d...3b.exe

windows7-x64

1

c9a040ab8d...3b.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    134s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 07:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c9a040ab8dcf5df70b5832308e8e24cb88e2c2c162e07975fcffe162c6eb8e3b.exe

  • Size

    3.7MB

  • MD5

    54d4c0a4c26f7fcc7b43347118fca8f0

  • SHA1

    9ab3dad3ed9bddc5d4519044d8e95ce95bd47983

  • SHA256

    c9a040ab8dcf5df70b5832308e8e24cb88e2c2c162e07975fcffe162c6eb8e3b

  • SHA512

    9eb4f76c8ecad820d0dc9098871397593dbb32e824fb5f2213349b0102fe1ae85ed3f5ed2430f068a71e28dc74664ae518bfcd48717f0dc889986a4dd0b64446

  • SSDEEP

    49152:VJvQMdbI0g2ZdgghbxdSz1oWy9TyNTiOTEEm/Z:pBZdgghi8w+JZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c9a040ab8dcf5df70b5832308e8e24cb88e2c2c162e07975fcffe162c6eb8e3b.exe
    "C:\Users\Admin\AppData\Local\Temp\c9a040ab8dcf5df70b5832308e8e24cb88e2c2c162e07975fcffe162c6eb8e3b.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3880-0-0x0000000000E30000-0x0000000000E31000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3880-2-0x0000000000400000-0x00000000007CF000-memory.dmp

    Filesize

    3.8MB

    Download