Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
26/01/2024, 22:05
Behavioral task
behavioral1
Sample
78819fb8d21fd6ca8cb00031478d9f34.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
78819fb8d21fd6ca8cb00031478d9f34.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
78819fb8d21fd6ca8cb00031478d9f34.exe
-
Size
323KB
-
MD5
78819fb8d21fd6ca8cb00031478d9f34
-
SHA1
6c5db754955eaf6c9866728e8c22cb4b8d561548
-
SHA256
45f5efcd5c41a5e9e75fecdd2d54840e1df86e90e04133c1f96b4af484b15bff
-
SHA512
3bf53ac4ac05484668e8137c9b8e638174179ec1b984fbfc07100d9a218abf43952437116ab12845d7e661b5052e0474cffdb60120a2c9c3fb3fe93101b19a97
-
SSDEEP
6144:Wb3nzbCvJoStFRrfDZYJwJAfUmYomFN5InrfdjfKhhr:+36JoStrfdsfUYrlzKhh
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2860-0-0x0000000000400000-0x00000000004CC000-memory.dmp upx behavioral1/memory/2860-2-0x0000000000400000-0x00000000004CC000-memory.dmp upx -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2860 78819fb8d21fd6ca8cb00031478d9f34.exe 2860 78819fb8d21fd6ca8cb00031478d9f34.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2860 78819fb8d21fd6ca8cb00031478d9f34.exe 2860 78819fb8d21fd6ca8cb00031478d9f34.exe