Analysis

  • max time kernel
    141s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 22:54

General

  • Target

    365ActRec.exe

  • Size

    953KB

  • MD5

    f61f945b5138e21b26ac144f54e046ef

  • SHA1

    d50226f0206702d27205b6bd563d1e7f369a0159

  • SHA256

    70c837795072445a64b850816f2920ec4f0d98fdb09376babfa49196adab9647

  • SHA512

    ceed90c2467eddf97dafc950a33b2a13a275c4b2feb09edcf5e6b0454592ca44e373f7d0364a8f94148b2ea811ff19ffbef1bd490b59217912e6dabb243a2db0

  • SSDEEP

    12288:vuE/RgkoiI/Tlef7V8mpR2N1+SYaoJzXCIy8x8LMAjC0zSiQditS+Ehyu0o:v7/w/TlmFJGIn0lzC6u0o

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\365ActRec.exe
    "C:\Users\Admin\AppData\Local\Temp\365ActRec.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3052-0-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/3052-3-0x0000000000400000-0x00000000004F3000-memory.dmp

    Filesize

    972KB

  • memory/3052-5-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB