Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 15:19
Static task
static1
Behavioral task
behavioral1
Sample
1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exe
Resource
win10v2004-20240426-en
General
-
Target
1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exe
-
Size
3.1MB
-
MD5
0c10346a1fb88cac390084c062503bcc
-
SHA1
483ae8213dfc6f106db5f0377b9fc74df24709bc
-
SHA256
1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385
-
SHA512
1bc65f5d05e082851ff10583829bb8890bea8fcf4296d7fe2dbb6a00a5952041037ebec03e5bfbe12c3fe8da5e65ddecdda3c32487f0ba154ff31a08a9bd7e3d
-
SSDEEP
49152:BvhV6ZBW3ZCGtTnLLOtVHpJwn1OGVhcUMOyHO20oS2TT+cDk:BJV6ZQTDL8BpJUYO4FTZ
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exepid process 3008 1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exepid process 3008 1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exe"C:\Users\Admin\AppData\Local\Temp\1921aa9f80e25bb4a1fcd22153aa708bbde1a39c5f816e7b8dcd8c93e40bb385.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3008