Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
03-02-2024 20:33
General
-
Target
5f819b4bd52d047c747600452089a7cf058505998e79972f7f356b9bc0dd38c9.exe
-
Size
10.0MB
-
MD5
0e841c771387844ade4dad07ab7fd4da
-
SHA1
9e0a5edfe4205eec97726354ef4787caa0666413
-
SHA256
5f819b4bd52d047c747600452089a7cf058505998e79972f7f356b9bc0dd38c9
-
SHA512
a0e461fff33f2aa5994ac1227bcb5d646c04f4c2b3438ff15db277b9a2c0c67aafc8ecf3031b5de2005530cdba01e2982c500b8c3b3327ff75bb02c6b0a496a4
-
SSDEEP
196608:3b3gyJ7Hyv2x8YwPB6+YOS9yaWwKHzVa3lKhOiyArgTKBy7lgPqRT:jzJ7HyOLb+FS9yFwK03lKQuhy8oT
Score
1/10
Malware Config
Signatures
-
Modifies registry class 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f819b4bd52d047c747600452089a7cf058505998e79972f7f356b9bc0dd38c9.exe"C:\Users\Admin\AppData\Local\Temp\5f819b4bd52d047c747600452089a7cf058505998e79972f7f356b9bc0dd38c9.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow