44f8f0b67907cb91d414a1c0cb33e74e42d201e05869129a9d1d4039dbfb0fe2 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
22-03-2024 23:48

Sharing

Report Analysis Logs

General

Target

2C2A5FFD16B2C07A378245BC4903AAA8.exe
Size

910KB
MD5

2c2a5ffd16b2c07a378245bc4903aaa8
SHA1

bdf1a94e0e7acd7c5d7f61e56b88c2e16bafe71f
SHA256

44f8f0b67907cb91d414a1c0cb33e74e42d201e05869129a9d1d4039dbfb0fe2
SHA512

7f597122462f38f61f2246d16e0c68d2f00c2b610c3393401d2badbf5958f91dea118c23eee39ab08e37069c72bf4ac360c8696eff7b862f3ac2229cb84537ab
SSDEEP

24576:fAHnh+eWsN3skA4RV1Hom2KXMmHaoeyFxl5:Ch+ZkldoPK8Yao3

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2908	2C2A5FFD16B2C07A378245BC4903AAA8.exe
2908	2C2A5FFD16B2C07A378245BC4903AAA8.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2908	2C2A5FFD16B2C07A378245BC4903AAA8.exe
2908	2C2A5FFD16B2C07A378245BC4903AAA8.exe

C:\Users\Admin\AppData\Local\Temp\2C2A5FFD16B2C07A378245BC4903AAA8.exe
"C:\Users\Admin\AppData\Local\Temp\2C2A5FFD16B2C07A378245BC4903AAA8.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2908-10-0x0000000000120000-0x0000000000124000-memory.dmp

Filesize
16KB

Download