Analysis
-
max time kernel
150s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09/04/2024, 13:49
General
-
Target
3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3.exe
-
Size
568KB
-
MD5
35e06be7915931f50ae9518b9b024d4b
-
SHA1
f80bd7ea7f09e374d86bef22d9a01f7ab91eb23e
-
SHA256
3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3
-
SHA512
215a60d6aa1562a776ab0098d51391bcd3f97b352831ef6499f6ea6b357e48ae6c49d13918a17868274d7d91b4e74a6f33379c0b872c9b7e26e8f98c8d88be56
-
SSDEEP
12288:PozGdX0M4ornOmZIzfMwHHQmRROXK23QcaLVsmdvx:P4GHnhIzOa23QHV9
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 3 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3.exe"C:\Users\Admin\AppData\Local\Temp\3fe0c0ed2cd4ebd556ba5af53d782796a7064a3cb2eb8759d87722c0b417afd3.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3644 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB