211c37d00b6555ca57c72c779220f31fdb21394436066991149c604487b44991 | Triage

Analysis

max time kernel
135s
max time network
151s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 10:21

Sharing

Report Analysis Logs

General

Target

MeMeLiveShow.exe
Size

992KB
MD5

f8c15dc56faffdc96995129c1a30c794
SHA1

cbe00d7f50b596b9c958fc951b64da30e283d6e6
SHA256

f85049ff4a1acde8021902fa51b7d7f3bd42df8ce9b8c3be49362516cbe7a2b5
SHA512

45ae09c9b604a9c6d9ba3afdf5f145ff2c73a9f96f7e2cdf7c9832a3629f93e1086bfec98d8c4001a8c7be3f39977b62178ce08baa05db9ca0b5f3f18b68be0b
SSDEEP

12288:Ol3ijfv4KJukIisIqt+Rc6Da0y38weB2hynO:Ol36X4Kv58+Rc6Ds3UBtO

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

MeMeLiveShow.exe

pid process

2772 MeMeLiveShow.exe
Suspicious use of SendNotifyMessage 1 IoCs

Processes:

MeMeLiveShow.exe

pid process

2772 MeMeLiveShow.exe

C:\Users\Admin\AppData\Local\Temp\MeMeLiveShow.exe
"C:\Users\Admin\AppData\Local\Temp\MeMeLiveShow.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...