Analysis
- max time kernel
161s - max time network
178s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
08/01/2024, 01:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
- Target c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe
- Size 4.4MB
- Sample240108-be9flshdgp
- SHA256 c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f
- MD5 7c4bdaae445d4e510897b26c870b0fae
- SHA1 13447e1583b06a37e71bd8101077bb27e7934b65
- SHA512 0a586d58969d3dfd64703fc2bed73e79e3c319f2d1687c3d432203f7049e61d053a5daf327d52c360592d9e9109980aead727d8d08d53524ef38e8b9133e9ab3
- SSDEEP 98304:318wtheThux2saQdDw/iOOqKSxf32M8MUZmBobFLOAkGkzdnEVomFHKnPG:3KwDbe0m2M8MCEobFLOyomFHKnPG
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4284 c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4284 c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4284 c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe 4284 c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe"C:\Users\Admin\AppData\Local\Temp\c31dae7cbe3738436827d0d81911aa1d6409bbf50806c9bec6edee22505b491f.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4284