bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 20:11

Target

bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e.exe
Size

14.1MB
MD5

2fe8c0a3561b47accc49e36259da8f6a
SHA1

16fa04a7bddd48d8b94284e4a907e72ff16ad874
SHA256

bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e
SHA512

5e18406e45c583a9c43db18644f75def8009864f0368b8cac7ee9325c2617061b5b9fe15db1eb4ba320367671d94042d7d2c5b2c4bbb3ff4debfe05df1316667
SSDEEP

98304:NmH8Zbvpe16G1juG1k7fgXDpTqhF22X0g1bZopRHSo0IzNfoj5//pVCyIoybmn/M:u248GQfaDQhF22Xo3HzzN

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e.exe

pid process

4344 bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e.exe

pid	process
4344	bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e.exe

C:\Users\Admin\AppData\Local\Temp\bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e.exe
"C:\Users\Admin\AppData\Local\Temp\bbf7bfe0741201246bfe1391f83bd56726510796ae6a45a593198eb7750c2c8e.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4344