Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-03-2024 02:17
Static task
static1
Behavioral task
behavioral1
Sample
867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe
Resource
win10v2004-20240226-en
General
-
Target
867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe
-
Size
1.3MB
-
MD5
b26007c701f550b1bff5150c37f824f7
-
SHA1
d91621bf95cf9be7b7b6e941e715f27e0e9f5b07
-
SHA256
867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d
-
SHA512
5502a9a1eaee1e172367f678728b17aff5922cc4dc46504dc25151aee4a9234c9c2978fc75baeeed4cc3b604b382afd784cde9a4500d8dc23d9a59f81ab23a32
-
SSDEEP
24576:oAHnh+eWsN3skA4RV1Hom2KXMmHaYQ3viOWeXvtSHIqS5NV9n5:vh+ZkldoPK8YaYrHIqONVr
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes:
867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exepid process 1300 867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe 1300 867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe -
Suspicious use of SendNotifyMessage 2 IoCs
Processes:
867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exepid process 1300 867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe 1300 867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe"C:\Users\Admin\AppData\Local\Temp\867e3c9147ef41bc4edff6002959c37c785d919b13edbd7e8ed150ea51f9f15d.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1300