Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-01-2024 08:46
General
-
Target
5601bb1882ff2a0aca04c998e91663c0.exe
-
Size
4.7MB
-
MD5
5601bb1882ff2a0aca04c998e91663c0
-
SHA1
762572192bab50357dbb528dfc76df0d3ca5e23b
-
SHA256
18e75ed089a1e042689cf812633806fa585584a92293c441c46f7697937fb60d
-
SHA512
639a743c0f98440b2d2a292b939c3a5dce926076b817077380bb2ff9f84740fb3daf1676b87a46afd60dc1bc546263f57a846b8e2246ce7b07683ca8bd88c2a0
-
SSDEEP
98304:vqfr8qjV5REqFsCwv6mfin14F4AMbogmZMznOWE1tDxxXqv:igqjvwibF92xd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5601bb1882ff2a0aca04c998e91663c0.exe"C:\Users\Admin\AppData\Local\Temp\5601bb1882ff2a0aca04c998e91663c0.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx