44be6c16360b52c55273cd643a6d2e0fb6489bd567014a65a30bd99114e1c733 | Triage

Analysis

max time kernel
132s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:28

Sharing

Report Analysis Logs

General

Target

BNjJ88767909876500h.exe
Size

1.0MB
MD5

c56cd8bfa6d6013618612530c970b058
SHA1

7403c3076587454135d369cb7d7e8cafcfd5c44a
SHA256

3486de6c9102221c1405f839d527386dac9f6bd75ae4d9fe625dfa8a2b2e6be1
SHA512

c61148561cbd28aa0def371477c51731be89a1ed8aed6675fcce362b60f2c2d4e99a3ab9c68bab42ad4423db56747a80401f5da545fe15a1b15d062fb138627c
SSDEEP

24576:BAHnh+eWsN3skA4RV1Hom2KXMmHa0dl5yQ+o06ttB5:Yh+ZkldoPK8Ya0djyQJ06tN

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

Processes:

BNjJ88767909876500h.exe

pid process

4828 BNjJ88767909876500h.exe
4828 BNjJ88767909876500h.exe
Suspicious use of SendNotifyMessage 2 IoCs

Processes:

BNjJ88767909876500h.exe

pid process

4828 BNjJ88767909876500h.exe
4828 BNjJ88767909876500h.exe

C:\Users\Admin\AppData\Local\Temp\BNjJ88767909876500h.exe
"C:\Users\Admin\AppData\Local\Temp\BNjJ88767909876500h.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4828-10-0x0000000001CF0000-0x0000000001CF4000-memory.dmp

Filesize
16KB

Download