Analysis
-
max time kernel
151s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26-03-2024 16:53
General
-
Target
24ebe7609d56c62fca780bf5ef346aa91c0412418f1f85d591005b4509bcbca9.exe
-
Size
216KB
-
MD5
c5bd56403a710b54acf45483e472d41f
-
SHA1
16f7d8a390e1bdd8072bc4691a54cf78a96c766c
-
SHA256
24ebe7609d56c62fca780bf5ef346aa91c0412418f1f85d591005b4509bcbca9
-
SHA512
ee38902086ef3cd15e0a7a6957a81d193b4eb426d4c3975da3edfb0f3a9f23a9c1f6ce3596caab9264e4587dddedd4dac632ecc3af2cffd9efd788a4f2c4cf76
-
SSDEEP
6144:c+8RKiCp4GLorsohtjigvBrHMZtV6MTU9EWv:c+wjqYswjpZHlM6l
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\24ebe7609d56c62fca780bf5ef346aa91c0412418f1f85d591005b4509bcbca9.exe"C:\Users\Admin\AppData\Local\Temp\24ebe7609d56c62fca780bf5ef346aa91c0412418f1f85d591005b4509bcbca9.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2216-0-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2216-1-0x0000000000400000-0x0000000000496000-memory.dmpFilesize
600KB
-
memory/2216-2-0x0000000000400000-0x0000000000496000-memory.dmpFilesize
600KB
-
memory/2216-3-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2216-4-0x0000000000400000-0x0000000000496000-memory.dmpFilesize
600KB