Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11-04-2024 23:36
Static task
static1
Behavioral task
behavioral1
Sample
9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe
Resource
win10v2004-20240226-en
General
-
Target
9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe
-
Size
1.1MB
-
MD5
9258acec51d72838b25d0a48767a6c95
-
SHA1
3dce5acc74ae4db1c3cdc516f4d680c631b27b65
-
SHA256
9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475
-
SHA512
7b31a5b974cf9c86fbd62b06ebdb5461a85687554a625ea7332c654c188b9e6c0a51a5a1f88af579c96e6ef9be3326c2732afef762f66e7ae45c100ed0e3a279
-
SSDEEP
24576:/AHnh+eWsN3skA4RV1Hom2KXMmHaA4H4444Cs0K4WgMcCNK4U25:ih+ZkldoPK8YaA4H4444Csgx7CNz
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes:
9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exepid process 1396 9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe 1396 9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe -
Suspicious use of SendNotifyMessage 2 IoCs
Processes:
9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exepid process 1396 9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe 1396 9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe"C:\Users\Admin\AppData\Local\Temp\9408b2474a4faee9afbab11fa258873175b9d9400d9c582104fb6400505c5475.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1396-10-0x0000000001860000-0x0000000001864000-memory.dmpFilesize
16KB