Analysis

  • max time kernel
    191s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    26-03-2024 16:53

General

  • Target

    39a6618795b858d4f9a976c203bb9bee199db3555b9583b308954ccc09cffc45.exe

  • Size

    81KB

  • MD5

    4823da39673471b5d911fc04d3cfae23

  • SHA1

    c2dc50705c66a3aa34b854d0a2ad621ceb2d61ca

  • SHA256

    39a6618795b858d4f9a976c203bb9bee199db3555b9583b308954ccc09cffc45

  • SHA512

    4f45d679b6eff80aa20780c3ecec76bc5eac6d13d446e33214a76f534cdfc36a232d20cf0a32283faef6f5483f97e731aa0ee53c78596b7565e6bf05204ec620

  • SSDEEP

    1536:lmqEEmpTRPx6/gnTGpx8NWa5gtYJ9z4LNks5:Ix64TWKP5nJ9yv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 60 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\39a6618795b858d4f9a976c203bb9bee199db3555b9583b308954ccc09cffc45.exe
    "C:\Users\Admin\AppData\Local\Temp\39a6618795b858d4f9a976c203bb9bee199db3555b9583b308954ccc09cffc45.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2328-0-0x0000000000400000-0x000000000041B000-memory.dmp
    Filesize

    108KB