Analysis

  • max time kernel
    142s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-03-2024 13:11

General

  • Target

    ActualWindowMinimizerCenter.exe

  • Size

    920KB

  • MD5

    2f0a8e15c9d4f1092483a838ee598830

  • SHA1

    0a178c6c78160f27d1801e37f4c638690df669c6

  • SHA256

    0b34d564287fe2d5c09fac251d5941976a3cb747971765d9a479f4f401875127

  • SHA512

    89ab980bfddfcb0bdca87b6fecad84e57e352bd49705f164f810d1baf453ec8ee5c1eeb9d6864d3030af42f04af1f0f6a7f93afa12945b159684b98c4421f5c7

  • SSDEEP

    24576:+gFwi1WN7goGyLBFcMZ1P55zikT7T2qaobeeQk4BG3oTyUaqeoPOuuLsn+DPGyZy:+gFROFHZbT2qaobeeQk4BGFqfS/nw5x

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ActualWindowMinimizerCenter.exe
    "C:\Users\Admin\AppData\Local\Temp\ActualWindowMinimizerCenter.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2172-0-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2172-1-0x0000000003130000-0x000000000318D000-memory.dmp

    Filesize

    372KB

  • memory/2172-3-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

    Filesize

    4KB

  • memory/2172-2-0x0000000000640000-0x0000000000641000-memory.dmp

    Filesize

    4KB

  • memory/2172-4-0x0000000000400000-0x00000000004EE000-memory.dmp

    Filesize

    952KB

  • memory/2172-5-0x0000000003130000-0x000000000318D000-memory.dmp

    Filesize

    372KB

  • memory/2172-9-0x0000000003130000-0x000000000318D000-memory.dmp

    Filesize

    372KB