Analysis
-
max time kernel
145s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/03/2024, 08:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d5aaee083418de49f3d775c83d507728.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d5aaee083418de49f3d775c83d507728.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
d5aaee083418de49f3d775c83d507728.exe
-
Size
244KB
-
MD5
d5aaee083418de49f3d775c83d507728
-
SHA1
f6a6238d30ff5359ce40e5896a9aad0f10ab844f
-
SHA256
79ae2ddfab8291643df8b63c8d7c5b46856bdabea3603dc46d3f83dd4794bea8
-
SHA512
255776db5fb0e6e70fad2a61c295c81c807b2fd696b64bcbffedbdeb1a8653c22f6e4fbb46fcc3f303da735f8865afc035f85c2583668ee9d397b6dbf4ef44d8
-
SSDEEP
6144:/H5qgNkGblPrEQcQFJRJ5Z6OGb0p0S0wn+nceskq9TBkliYIxYuA:/L7JLTHxGbJwn+np1q9TG1d
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 30 IoCs
pid Process 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe -
Suspicious use of SendNotifyMessage 30 IoCs
pid Process 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe 2812 d5aaee083418de49f3d775c83d507728.exe