Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12-01-2024 23:31
Static task
static1
Behavioral task
behavioral1
Sample
059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8.exe
Resource
win10v2004-20231215-en
General
-
Target
059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8.exe
-
Size
1.2MB
-
MD5
ee905de6b801002dc21a73a314d17064
-
SHA1
7261d2c056bdaa5d74549ca949409baf8c69f6de
-
SHA256
059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8
-
SHA512
f981e1e2709949e747b76af3a6ee4b45f352dc726d4efdc0bf138a6bada58a07ac73afa6bca4448b37340c56435a4b809d2eb19d12dbb26d35a3f82ef4a7f280
-
SSDEEP
24576:QvjFRcSK1e3DsWIG2pf8lEaPk2uERNo5MIkuJvj8lQnYCt4F1QS3C3SR2qIR:QvjTfK1e3DsWI90ltPk2uERNo5R3J4l0
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4396 059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4396 059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8.exe"C:\Users\Admin\AppData\Local\Temp\059d757b85ac18a9258469f709980cf8260b606e5183f32a8eca6d9a135fc5b8.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4396