Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-04-2024 12:30

General

  • Target

    Furion hack loader.exe

  • Size

    660KB

  • MD5

    785e2338867406000f4a3bcfb2a50763

  • SHA1

    3a1cd007c786d93ab7bc845f532b03d66174bf23

  • SHA256

    2c4c33b6b2845000614e863d9f67d739c9aa99f01053c6f63f672b7dbcf7b22c

  • SHA512

    256e7eec6760c2e8398c27a2f4c765903439b7d6c8f1f254df9ef7ebcb04f5bfe602d0780c41d6f22d7dbc250781151a1be3d24f901d10902977eae19c17f6c8

  • SSDEEP

    12288:0wlO+jqEI/5d2Ty3YBjcTcbvsoyy2gBLE24P7yNyq:9VqEI/T2W3YBjcqzyN2oyNyq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Furion hack loader.exe
    "C:\Users\Admin\AppData\Local\Temp\Furion hack loader.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:5060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads