Analysis
-
max time kernel
90s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
06/04/2024, 01:11
Static task
static1
Behavioral task
behavioral1
Sample
3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe
Resource
win10v2004-20231215-en
General
-
Target
3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe
-
Size
912KB
-
MD5
9cf2da5e9633426dde8d0e352724e900
-
SHA1
114a529fc7224d7d1e58cac722b677187b0ce105
-
SHA256
3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe
-
SHA512
8f1fcffcd9a80e1e1dc5d65eeeeb0973056501307a52f4912ccca687d931d36a85764c092854f2a359aec444bb67a681833de67e3134fca447c3d0299cd3c293
-
SSDEEP
12288:8o/S1H+npapwHMdeT0mWQGR6DeXXYZPCC+pjpfbdN5cXIWPf/:88w41MYT0mWFR6DeLC+pjJT5cXIWPf/
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4512 3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe 4512 3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4512 3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe 4512 3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe"C:\Users\Admin\AppData\Local\Temp\3c54ecbe78589837b81ad415d007f7c6f6f9a9a67ddc5a47b78e92e3700bfdbe.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4512