Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-03-2024 10:30
General
-
Target
xhphonescan.exe
-
Size
288KB
-
MD5
bd97b0dc68818a7cbffa6500c2c775f6
-
SHA1
029dcfed7e4358b5826f05c0456ee31b40f43c96
-
SHA256
fd39fe0fafb9832794e89b452b998abbb0a31e13f7575e19894a8ab336cd4b0b
-
SHA512
4fe8f8bcae786d22735bf1d6d0146f0d6ab646c08f812c3fb622ba132c61ba5bfd0bf7a9cac27d825b2a394870242c4f5b599b8ac6f162b81c77b06717a8db1d
-
SSDEEP
6144:YKyRdy5NLYcN0QgivUtv9tF89i3IyO40f9dpjK1wA:zCdy5BmQgAAXW9X201dca
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xhphonescan.exe"C:\Users\Admin\AppData\Local\Temp\xhphonescan.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
756KB
-
Filesize
4KB
-
Filesize
756KB
-
Filesize
4KB