Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
22/05/2024, 05:26
General
-
Target
afdbb645bd02dfa0dc648b5ec49a3a5b8aa69f5f167eb438cefd1bf315ff56d3.exe
-
Size
819KB
-
MD5
b1de07df409891ca439aa8c49f7475aa
-
SHA1
09a595080481959f1fc0ebac73563affb88fe92b
-
SHA256
afdbb645bd02dfa0dc648b5ec49a3a5b8aa69f5f167eb438cefd1bf315ff56d3
-
SHA512
bbbf970fb24358cf4fff51e37a768ff9217055ea7c40846328fc82f4c338b7c954e062c014cf2b2928e9ee2ea2fe086e46ca3aa77b29fd13df84f30f31554b68
-
SSDEEP
12288:ICdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBga/SJQ:ICdxte/80jYLT3U1jfsWa/SJQ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 20 IoCs
-
Suspicious use of SendNotifyMessage 20 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\afdbb645bd02dfa0dc648b5ec49a3a5b8aa69f5f167eb438cefd1bf315ff56d3.exe"C:\Users\Admin\AppData\Local\Temp\afdbb645bd02dfa0dc648b5ec49a3a5b8aa69f5f167eb438cefd1bf315ff56d3.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage