44be6c16360b52c55273cd643a6d2e0fb6489bd567014a65a30bd99114e1c733 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 01:28

Sharing

Report Analysis Logs

General

Target

BNjJ88767909876500h.exe
Size

1.0MB
MD5

c56cd8bfa6d6013618612530c970b058
SHA1

7403c3076587454135d369cb7d7e8cafcfd5c44a
SHA256

3486de6c9102221c1405f839d527386dac9f6bd75ae4d9fe625dfa8a2b2e6be1
SHA512

c61148561cbd28aa0def371477c51731be89a1ed8aed6675fcce362b60f2c2d4e99a3ab9c68bab42ad4423db56747a80401f5da545fe15a1b15d062fb138627c
SSDEEP

24576:BAHnh+eWsN3skA4RV1Hom2KXMmHa0dl5yQ+o06ttB5:Yh+ZkldoPK8Ya0djyQJ06tN

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

Processes:

BNjJ88767909876500h.exe

pid process

3036 BNjJ88767909876500h.exe
3036 BNjJ88767909876500h.exe
Suspicious use of SendNotifyMessage 2 IoCs

Processes:

BNjJ88767909876500h.exe

pid process

3036 BNjJ88767909876500h.exe
3036 BNjJ88767909876500h.exe

C:\Users\Admin\AppData\Local\Temp\BNjJ88767909876500h.exe
"C:\Users\Admin\AppData\Local\Temp\BNjJ88767909876500h.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3036-10-0x0000000000120000-0x0000000000124000-memory.dmp

Filesize
16KB

Download