f77a81049f79e30bbdc9806d95d46d893f73ac43b302eb8426e6ed2cfe18a9ed | Triage

Analysis

max time kernel
137s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
19/01/2024, 09:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

67480ee1840888eb55dcd77ecdc3bac3.exe
Size

980KB
MD5

67480ee1840888eb55dcd77ecdc3bac3
SHA1

5d7f11918b3fa3285ba06d6a922369442380fadc
SHA256

f77a81049f79e30bbdc9806d95d46d893f73ac43b302eb8426e6ed2cfe18a9ed
SHA512

514f068ff7688e8be8cde67fbad602f00101508ee62b4c45efbbc60d7ac31f38a84a57ef8a6e54c0685fae53fc5fef1bc862128b5ca275d413c3f0618191e821
SSDEEP

24576:v4f8og+7/C3fX+Jlwq3g/46tAdyBFaiFwIf3:v5a7++J6yEFaowIv

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4060	67480ee1840888eb55dcd77ecdc3bac3.exe
4060	67480ee1840888eb55dcd77ecdc3bac3.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4060	67480ee1840888eb55dcd77ecdc3bac3.exe
4060	67480ee1840888eb55dcd77ecdc3bac3.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4060	67480ee1840888eb55dcd77ecdc3bac3.exe

C:\Users\Admin\AppData\Local\Temp\67480ee1840888eb55dcd77ecdc3bac3.exe
"C:\Users\Admin\AppData\Local\Temp\67480ee1840888eb55dcd77ecdc3bac3.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads