e501c4debcd56c9bbc5aabcd271c11c25d75e16f00a67aabe35be389666f6ff9 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
08/04/2024, 22:38

Sharing

Report Analysis Logs

General

Target

KeyTrans.exe
Size

1.3MB
MD5

cc40cb210a954fe51117e2de9fc941f9
SHA1

2ae6ed7e35c10caa4fdda2fa56c1da6c3664c3fc
SHA256

6f8475a8d04fc7ccf5d13291c8acb06e3f088c7a856f451a37517b1728050221
SHA512

5b19d83700007abe9553f923c8ed281b4d35d6e1d9a953cb5610e23ab97ea63f6582903831b7a3261e0288cf11b2b2f72d81a137a00e4c4bacdc7caea95d5b34
SSDEEP

24576:tyxOLNfJn710pRRJ4bKHqZo+gyT3zJ2kv:tTNPp22NJ2K

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1992	KeyTrans.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1992	KeyTrans.exe

C:\Users\Admin\AppData\Local\Temp\KeyTrans.exe
"C:\Users\Admin\AppData\Local\Temp\KeyTrans.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1992-0-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/1992-1-0x0000000000400000-0x0000000000554000-memory.dmp

Filesize
1.3MB

Download