Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03-04-2024 13:49
Static task
static1
Behavioral task
behavioral1
Sample
da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe
Resource
win10v2004-20240226-en
General
-
Target
da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe
-
Size
1.4MB
-
MD5
a1712e55e2076a07b330d6ba6800d11a
-
SHA1
8bb6d0805934764e982a4f75c5e5be4bd98bf24d
-
SHA256
da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75
-
SHA512
0f8bb138441afb7c7bd444d20138d765aae36dd81316d75bf9136e0c78a1a21228ef023b7fa1b40f8eddeded69e3488b4607d22864e170c5fa484e36ccb0ab93
-
SSDEEP
24576:9qDEvCTbMWu7rQYlBQcBiT6rprG8aSvC55FMWq8DZPB:9TvC/MTQYxsWR7aSvYCmP
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes:
da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exepid process 2492 da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe 2492 da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe -
Suspicious use of SendNotifyMessage 2 IoCs
Processes:
da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exepid process 2492 da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe 2492 da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe"C:\Users\Admin\AppData\Local\Temp\da556b674b032459bffc75b38d9a46495a772724ae48eb3fd67673504442fa75.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2492