Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09/04/2024, 13:49
General
-
Target
3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3.exe
-
Size
568KB
-
MD5
35e06be7915931f50ae9518b9b024d4b
-
SHA1
f80bd7ea7f09e374d86bef22d9a01f7ab91eb23e
-
SHA256
3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3
-
SHA512
215a60d6aa1562a776ab0098d51391bcd3f97b352831ef6499f6ea6b357e48ae6c49d13918a17868274d7d91b4e74a6f33379c0b872c9b7e26e8f98c8d88be56
-
SSDEEP
12288:PozGdX0M4ornOmZIzfMwHHQmRROXK23QcaLVsmdvx:P4GHnhIzOa23QHV9
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3.exe"C:\Users\Admin\AppData\Local\Temp\3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
1.3MB