3c33b5e62c193ba92cd963aa56a4e6095873562976e8785a853a0fff150bc2a4 | Triage

Analysis

max time kernel
150s
max time network
152s
platform
windows10-1703_x64
resource
win10-20231215-en
resource tags

arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
submitted
05/01/2024, 15:31

Sharing

Report Analysis Logs

General

Target

MacroCreator/MacroCreator.exe
Size

1.8MB
MD5

35bb215bc1982e37fa654ff3bd0de583
SHA1

341562913aadc429f4d33008c247c67a34865381
SHA256

da4058428cc959e3028df81e559be64815e5cd50327e748faf388246dc0b838f
SHA512

71fff75300f61f0fe7ecc01a98efb24404cd4168c3fc64a15621648c16b8a590e09dd1f9ffd2abb5b92ed1fcba6d27c6a032643f1bc7be957e8e33166d2994ae
SSDEEP

49152:qmzO+sCC+AZEg76raWqt3j/eI2cJp+GxNX:wEHFqtZtf

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
792	MacroCreator.exe
792	MacroCreator.exe
792	MacroCreator.exe
792	MacroCreator.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
792	MacroCreator.exe
792	MacroCreator.exe
792	MacroCreator.exe
792	MacroCreator.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
792	MacroCreator.exe
792	MacroCreator.exe
792	MacroCreator.exe

C:\Users\Admin\AppData\Local\Temp\MacroCreator\MacroCreator.exe
"C:\Users\Admin\AppData\Local\Temp\MacroCreator\MacroCreator.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads