Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24-04-2024 01:13

General

  • Target

    301a02cc0eb727a274bb807cb64022861b228129709070739721c9a4548918ea.exe

  • Size

    1.0MB

  • MD5

    5705caf18efe32863c38f4d50ec88cc1

  • SHA1

    15c23f1618bef4336b98212acb97136fbfb67c36

  • SHA256

    301a02cc0eb727a274bb807cb64022861b228129709070739721c9a4548918ea

  • SHA512

    e8820c21811ce415f307052a71a2a9b5ff6c50e5913d3b2c0428d55675d41ed52d96ec86f6ac4b9c1ca503d79f18f964819bdb2b9c9a9699ec14fb24b10ad069

  • SSDEEP

    24576:OAHnh+eWsN3skA4RV1Hom2KXMmHaOe+lzye5:5h+ZkldoPK8YaOf

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\301a02cc0eb727a274bb807cb64022861b228129709070739721c9a4548918ea.exe
    "C:\Users\Admin\AppData\Local\Temp\301a02cc0eb727a274bb807cb64022861b228129709070739721c9a4548918ea.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2868-10-0x0000000000120000-0x0000000000124000-memory.dmp
    Filesize

    16KB