Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
03-05-2024 20:33
Static task
static1
Behavioral task
behavioral1
Sample
0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe
Resource
win10v2004-20240419-en
General
-
Target
0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe
-
Size
884KB
-
MD5
171ce8f8d51eea91ef9881831a1d9e2b
-
SHA1
4faabe2255564b3809ae4e36b027650f1af0478d
-
SHA256
0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d
-
SHA512
5fda97a1d3a32670f5720d659754e07fdb72b2817c99feffd18caa1332574b7895f32e0f152dfc8efd9d7d85cc95e96f1fb054ddfd9243e373b0b3cc717c46ab
-
SSDEEP
12288:E5p0ni8x0J0Ln4OP+oji5sbp8aYQ0SjJqQvLSkZAJLcdta3:E5yBxlnfP1jWsd88LSk2JG
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1712 0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1712 0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1712 0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe 1712 0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe 1712 0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe"C:\Users\Admin\AppData\Local\Temp\0db0dc81470e7f23de0d6da21e5a3d7e24138d14f67e71a3fd0e1cffca36486d.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1712