4d6bcd9ed785fd21f7040fd4002b2120900c1e382e5837c8b674a709538e3e62 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 01:15

Sharing

Report Analysis Logs

General

Target

factura098765679000.exe
Size

1.3MB
MD5

be87f3567ec40ab1dd6aa915b5ca523d
SHA1

aa673ad372f8678a014dc5407ca516d9929481eb
SHA256

c0a4458837e12a455f523dec478a29019597d839029b798701b5f7f1c41143b1
SHA512

76caa7ca1987df1535b13436f7d64fd5955f6012163a9bdc7f4dd1cdb232a2e6245e859b077adaf8a6b7d07cca9ee11332344dded570dea23d1ab973c1bd3da6
SSDEEP

24576:OAHnh+eWsN3skA4RV1Hom2KXMmHa3nhilkELKFXCQ3M5:5h+ZkldoPK8Ya3ncdLVQi

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1928	factura098765679000.exe
1928	factura098765679000.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
1928	factura098765679000.exe
1928	factura098765679000.exe

C:\Users\Admin\AppData\Local\Temp\factura098765679000.exe
"C:\Users\Admin\AppData\Local\Temp\factura098765679000.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1928-10-0x0000000000160000-0x0000000000164000-memory.dmp

Filesize
16KB

Download