b46aa06eec0afb6acb771e3d45331ba543dcaa8aaaa57c36f35f42f517419d3b | Triage

Analysis

max time kernel
140s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
24/04/2024, 03:37

Sharing

Report Analysis Logs

General

Target

Animosity.exe
Size

850KB
MD5

507ae8301d507b44cea5a314e7e63af6
SHA1

d5469a83fc02980eaac489f8c4b16074f4efa76b
SHA256

b46aa06eec0afb6acb771e3d45331ba543dcaa8aaaa57c36f35f42f517419d3b
SHA512

27fd51bf03798e5f17d5449b431786cde0fd499e7888128dcbf545ebcb7fb0ef0fe9b59c4a75de16054318bdcc49c46f5662d86ce1ebf9932b5dda2b719a93c8
SSDEEP

24576:2siHCC54ViVyJtqzqv9IdHHyGeQl561LmxaR:tCKAESVVum4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3776	Animosity.exe
3776	Animosity.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3776	Animosity.exe
3776	Animosity.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
3776	Animosity.exe
3776	Animosity.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3776	Animosity.exe

C:\Users\Admin\AppData\Local\Temp\Animosity.exe
"C:\Users\Admin\AppData\Local\Temp\Animosity.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads