c8e6a5f1bb47344fbe4cf2145cb97e6b4c995d99e074b924fe66cc8d8a209c9b | Triage

Analysis

max time kernel
497s
max time network
568s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
24-04-2024 17:33

Sharing

Report Analysis Logs

General

Target

NoRiskClient.exe
Size

16.9MB
MD5

a5857a5bac8f34accc9dd00257d7c691
SHA1

9891ab62beb1c7b7a61c2467673a1fb9ae39a387
SHA256

d72ce308ebba37767dff105aa1f652ad48ceb98b2fda26d381b4451889950c74
SHA512

5df2b241d3618cf4111f21ce5a402f4a12b2860aa84f881952e1884d357066a261d4e7b5fddd8471f42083bcf2b9ff5c4c4790d926b55e7a71d38695d374a89e
SSDEEP

196608:VQ4RfW/mK98MgTBcxSns6UOaYH6m+7y2V:VQ4RfW598MwFjhaYHf2

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

NoRiskClient.exe

pid process

1404 NoRiskClient.exe

C:\Users\Admin\AppData\Local\Temp\NoRiskClient.exe
"C:\Users\Admin\AppData\Local\Temp\NoRiskClient.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...