Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
05/04/2024, 15:52
General
-
Target
ResizeEnableRunner.exe
-
Size
40KB
-
MD5
2ad026fa67884af1393d0991d9629a22
-
SHA1
e2c47230815998e2d6b23fb1bca4c9ab6d95f4b3
-
SHA256
24491da13fa6325e2ffe941112fbb6ee5fa5c8b7da612395afd7e3ab66ea599d
-
SHA512
60e3d078af8ae127679daafee118f73a0d5838c3334879a9665a40cafa94d2ad22db5c9d52f9e90f2fd05348a14c7e8066668787036ce4ef7290324837405376
-
SSDEEP
384:0VjjJO0D/llqx8wCBdy6j/pRuL5lgtvAYvybU2OI7hIoGIEEgEJxT:CjDrfqx8PGk/rYImummoPEEgE
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ResizeEnableRunner.exe"C:\Users\Admin\AppData\Local\Temp\ResizeEnableRunner.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵