Analysis
-
max time kernel
143s -
max time network
157s -
platform
windows11-21h2_x64 -
resource
win11-20240214-en -
resource tags
-
submitted
19/02/2024, 16:38
General
-
Target
malzero/tools/nosleep/NoSleep.exe
-
Size
11KB
-
MD5
720f91e9f818a0ac3122a12e95b76d48
-
SHA1
47c44510621f92b61b3f8c9c19a8a672f89dfdff
-
SHA256
91fd58d7d04718bb7845cf3f912fdebf99bff1dad2196ff5bf33244c3f7f19bf
-
SHA512
662a523cc30db0456d1d7f5822aa0950fe178d3a973874918c63c2b1a6a76e821805c8343e90782b8079d5552505f2fc2da3583f8ff5c7be432399e389d70ab6
-
SSDEEP
192:u++1ytmJ78iRJoIz0Ssp3X4rvy3OSbO0mi:u++1ytc8oJoIz0T3X4rKLbO0mi
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\malzero\tools\nosleep\NoSleep.exe"C:\Users\Admin\AppData\Local\Temp\malzero\tools\nosleep\NoSleep.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
48KB