Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27-03-2024 16:06
General
-
Target
IDBoanMon.exe
-
Size
703KB
-
MD5
0ccf16a3c9d76eada96efd81e341fc5b
-
SHA1
1dd0a95554d0500c0784a0570cff30acf996ef48
-
SHA256
3bc95b546a70fdf885feda183288dcf4535719a4d7411479bd17de75197dbcc6
-
SHA512
40b6100f03e4d14d7871dc471322dee43da5ce554ca029e693eb0211dcb5c4ec9f692cb2cf12765ff902b2c32e9be504cb461b313dcd3ad8a246ba86e61496c1
-
SSDEEP
6144:/sUak+OtMzb5S+91osQ5HAsOIQE6f3BLL9+nMQxfgNLfzYWE:/sUak+oMzbUAsz6f3BLx+nMQxYNLfn
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDBoanMon.exe"C:\Users\Admin\AppData\Local\Temp\IDBoanMon.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx