Analysis
-
max time kernel
134s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 22:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044.exe
Resource
win7-20240220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044.exe
-
Size
1014KB
-
MD5
66d8a93296761bd632cdf86ff01932f8
-
SHA1
c697832868c2e9f54acd88694cd00a53c8ead1c7
-
SHA256
4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044
-
SHA512
6903fdb59c74bbc094819012820035d9270534c22edc1f26a62211494ac308be54921bf6aecf73afd857f32302bb5bf54808208e06c668d9ce4414bf59bd0713
-
SSDEEP
24576:FOQtd5V/JOwsprd5V/JOwspydHV/JOwsp3:bNhO7hOchO
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1884 4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1884 4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044.exe"C:\Users\Admin\AppData\Local\Temp\4f600e941df4935040123bd1084d609b7ed0d0e272951f6517e636f830d5c044.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1884