7eb8647ef59682e127eb5b698cb2d496a6c87790c88a69ab5bdf7f682ee7d171 | Triage

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 12:17

Sharing

Report Analysis Logs

General

Target

albiondata-client.exe
Size

11.0MB
MD5

f76d1cc6b91741b6347769f341213690
SHA1

2f8bb320c46841436c6d167f074b3b2159fc3687
SHA256

10e8f68121d80829b7a44c7c53db21319a7faa9fde71ba797502cf2c861517fe
SHA512

891545da7f402b0c277466ea6e2a12a0c85a40db3770d4e06367bf9af7918d7d062d8bff780fe72835a34112f8d40e2aa81a4bac79ff0bee98624bee3385414a
SSDEEP

196608:c/ua4hh+ND3G3gui7KXT8Wx1ZMXzBBWiMVP6qt:Hh4NDWrHTnNB6q

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
852	albiondata-client.exe
852	albiondata-client.exe
852	albiondata-client.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
852	albiondata-client.exe
852	albiondata-client.exe
852	albiondata-client.exe

C:\Users\Admin\AppData\Local\Temp\albiondata-client.exe
"C:\Users\Admin\AppData\Local\Temp\albiondata-client.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads