Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 21:00

General

  • Target

    ϳ.exe

  • Size

    1003KB

  • MD5

    e83c88d6809e2e542d9a89d287b3d0d9

  • SHA1

    dd863f2f3ef38cc9af2607a2f9353519eb0deec6

  • SHA256

    fdb434e1de115d5439589fde98afca8006ba50448f751c297ec3c0135b375517

  • SHA512

    38bd7cb69f2f963ac1c174a49c7139557e9db966a719ccca96cacb36216d3041e1feb4ad780885bae4fdc8201852f2dc35e120b0277f078152215256d84f8a6e

  • SSDEEP

    24576:3iOWd0Yy9AAGLx9hJzIT1x6hZflxtoPE7uzL:edo9jEt86h9L8

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ϳ.exe
    "C:\Users\Admin\AppData\Local\Temp\ϳ.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2912-0-0x000000000049B000-0x000000000049C000-memory.dmp

          Filesize

          4KB

        • memory/2912-1-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-2-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-3-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-4-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-5-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-6-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-7-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-8-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-9-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-10-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-11-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-12-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-13-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-14-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-15-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB

        • memory/2912-16-0x0000000000400000-0x00000000007A8000-memory.dmp

          Filesize

          3.7MB