Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
25/04/2024, 03:29
General
-
Target
cdfd8d6e8365db664f9ae10dc55a174fe0350cef0fa46911ab142545bdcfb388.exe
-
Size
3.1MB
-
MD5
6984f293ecf8000afa40a0a50880db06
-
SHA1
53650bcd4f123d3f6b0875ccd72d12c46e5c1c5e
-
SHA256
cdfd8d6e8365db664f9ae10dc55a174fe0350cef0fa46911ab142545bdcfb388
-
SHA512
56e05cda04061b76ffe03e49ca90d03bcde6ea635fc32668f45edfe42bf295c7c725f8a541c82e60ebbb505236998f4ec350da1776ab26cacce92a6e705dad28
-
SSDEEP
49152:sDkYOMwwnMb4PmyVjkjBMO+YrovpU/9H2RAR5FeA6w:RYOXwnS4rVjNOgM
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cdfd8d6e8365db664f9ae10dc55a174fe0350cef0fa46911ab142545bdcfb388.exe"C:\Users\Admin\AppData\Local\Temp\cdfd8d6e8365db664f9ae10dc55a174fe0350cef0fa46911ab142545bdcfb388.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage