Analysis

  • max time kernel
    159s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 03:24

General

  • Target

    tyframe.exe

  • Size

    981KB

  • MD5

    d6f79d061aa638dd20f1ded12d8447ad

  • SHA1

    7263ac01813bac63e87457fc9f28f52defb3b6a6

  • SHA256

    12d2a55d16c7bf1c4b07712a2c80cc78d168af227d73fd0f70c009e0a1af19f0

  • SHA512

    9927fc0e72a3041d63ce768fd095ed79d0c9379eb6a96136554d000d8982a2fc183ffba1563f163aa18318acd07e163a0d61fc285719c4eab72b5503b48c2ba2

  • SSDEEP

    24576:VnlwCaMaqXsay0JzM205aE9pB2ws+58CX:VOCzX1zM2CBHEwTX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tyframe.exe
    "C:\Users\Admin\AppData\Local\Temp\tyframe.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3020-0-0x0000000000400000-0x0000000000688000-memory.dmp

    Filesize

    2.5MB

  • memory/3020-1-0x00000000002F0000-0x000000000033B000-memory.dmp

    Filesize

    300KB

  • memory/3020-2-0x00000000002C0000-0x00000000002C1000-memory.dmp

    Filesize

    4KB

  • memory/3020-5-0x00000000002D0000-0x00000000002D1000-memory.dmp

    Filesize

    4KB

  • memory/3020-4-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/3020-6-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/3020-10-0x0000000002960000-0x0000000002962000-memory.dmp

    Filesize

    8KB

  • memory/3020-26-0x0000000002950000-0x0000000002952000-memory.dmp

    Filesize

    8KB

  • memory/3020-25-0x00000000007C0000-0x00000000007C1000-memory.dmp

    Filesize

    4KB

  • memory/3020-24-0x00000000021C0000-0x00000000021C1000-memory.dmp

    Filesize

    4KB

  • memory/3020-23-0x00000000021A0000-0x00000000021A1000-memory.dmp

    Filesize

    4KB

  • memory/3020-22-0x00000000021E0000-0x00000000021E1000-memory.dmp

    Filesize

    4KB

  • memory/3020-21-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/3020-20-0x00000000021F0000-0x00000000021F1000-memory.dmp

    Filesize

    4KB

  • memory/3020-19-0x00000000021D0000-0x00000000021D1000-memory.dmp

    Filesize

    4KB

  • memory/3020-18-0x0000000002200000-0x0000000002201000-memory.dmp

    Filesize

    4KB

  • memory/3020-17-0x0000000002130000-0x0000000002131000-memory.dmp

    Filesize

    4KB

  • memory/3020-16-0x0000000002160000-0x0000000002161000-memory.dmp

    Filesize

    4KB

  • memory/3020-15-0x00000000007D0000-0x00000000007D1000-memory.dmp

    Filesize

    4KB

  • memory/3020-14-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/3020-13-0x0000000002140000-0x0000000002141000-memory.dmp

    Filesize

    4KB

  • memory/3020-12-0x0000000000820000-0x0000000000821000-memory.dmp

    Filesize

    4KB

  • memory/3020-11-0x0000000002150000-0x0000000002151000-memory.dmp

    Filesize

    4KB

  • memory/3020-9-0x00000000003F0000-0x00000000003F1000-memory.dmp

    Filesize

    4KB

  • memory/3020-8-0x0000000002970000-0x0000000002971000-memory.dmp

    Filesize

    4KB

  • memory/3020-27-0x00000000029F0000-0x0000000002AF0000-memory.dmp

    Filesize

    1024KB

  • memory/3020-7-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/3020-28-0x00000000029F0000-0x0000000002AF0000-memory.dmp

    Filesize

    1024KB

  • memory/3020-3-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/3020-30-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/3020-38-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/3020-37-0x0000000002980000-0x0000000002981000-memory.dmp

    Filesize

    4KB

  • memory/3020-36-0x0000000002990000-0x0000000002991000-memory.dmp

    Filesize

    4KB

  • memory/3020-35-0x00000000029A0000-0x00000000029A1000-memory.dmp

    Filesize

    4KB

  • memory/3020-34-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/3020-33-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/3020-32-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/3020-31-0x00000000029E0000-0x00000000029E1000-memory.dmp

    Filesize

    4KB

  • memory/3020-29-0x00000000029D0000-0x00000000029D1000-memory.dmp

    Filesize

    4KB

  • memory/3020-40-0x00000000025D0000-0x00000000025D1000-memory.dmp

    Filesize

    4KB

  • memory/3020-39-0x0000000002520000-0x0000000002521000-memory.dmp

    Filesize

    4KB

  • memory/3020-41-0x00000000003D0000-0x00000000003D1000-memory.dmp

    Filesize

    4KB

  • memory/3020-42-0x0000000000400000-0x0000000000688000-memory.dmp

    Filesize

    2.5MB

  • memory/3020-43-0x00000000002F0000-0x000000000033B000-memory.dmp

    Filesize

    300KB

  • memory/3020-45-0x00000000029F0000-0x0000000002AF0000-memory.dmp

    Filesize

    1024KB

  • memory/3020-46-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/3020-47-0x0000000000400000-0x0000000000688000-memory.dmp

    Filesize

    2.5MB

  • memory/3020-48-0x0000000000400000-0x0000000000688000-memory.dmp

    Filesize

    2.5MB