91faa45dec34b787a21c36e61b85a3a060da22303edc03e003d6adacf28286d6 | Triage

Analysis

max time kernel
148s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
26/04/2024, 16:16

Sharing

Report Analysis Logs

General

Target

Bin/Extensions/FpsUnlocker.exe
Size

488KB
MD5

52f46ced3b06b19eac3369fbdb4ee2ee
SHA1

1bc549fa770b1bf3925248a3853a87af9948381f
SHA256

d0685e397486bd9f54eda33133e87e3970dedf5038ef0e4d058de34d796d72ac
SHA512

d65a7f73a497e18d0123306c3e940cdd5b22f61ad88fcd9a334c95bab0db665a8e61d11c9c78a656cbfdd7a691e782351fa712aa97c6f38f1d641ae91e3d23af
SSDEEP

6144:9nsLTb6hU1R1IDT3nn/b10WyIZUdA8CQ3mAg0y0Noh+p9NWRzbX:6TbgrDT3n/b6qiA8CQqvYogp/6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe
1520	FpsUnlocker.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1520	FpsUnlocker.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1520	FpsUnlocker.exe

C:\Users\Admin\AppData\Local\Temp\Bin\Extensions\FpsUnlocker.exe
"C:\Users\Admin\AppData\Local\Temp\Bin\Extensions\FpsUnlocker.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads