Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
07/01/2024, 22:54
Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
365ActRec.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
365ActRec.exe
Resource
win10v2004-20231222-en
General
-
Target
365ActRec.exe
-
Size
953KB
-
MD5
f61f945b5138e21b26ac144f54e046ef
-
SHA1
d50226f0206702d27205b6bd563d1e7f369a0159
-
SHA256
70c837795072445a64b850816f2920ec4f0d98fdb09376babfa49196adab9647
-
SHA512
ceed90c2467eddf97dafc950a33b2a13a275c4b2feb09edcf5e6b0454592ca44e373f7d0364a8f94148b2ea811ff19ffbef1bd490b59217912e6dabb243a2db0
-
SSDEEP
12288:vuE/RgkoiI/Tlef7V8mpR2N1+SYaoJzXCIy8x8LMAjC0zSiQditS+Ehyu0o:v7/w/TlmFJGIn0lzC6u0o
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 3052 365ActRec.exe 3052 365ActRec.exe 3052 365ActRec.exe 3052 365ActRec.exe -
Suspicious use of SendNotifyMessage 4 IoCs
pid Process 3052 365ActRec.exe 3052 365ActRec.exe 3052 365ActRec.exe 3052 365ActRec.exe