Overview

overview

9

Static

static

3

1b6d49a8fa...18.exe

windows7-x64

9

1b6d49a8fa...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-05-2024 04:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1b6d49a8fac845180aabff07bcd017045b3266b3163a1ed0030bcb91cfe29918.exe

  • Size

    5.7MB

  • MD5

    036cf662f5a2920f880475e3295dc99a

  • SHA1

    bea1bb2c877403a97bbb29b6664ebb4b1fcb2a0e

  • SHA256

    1b6d49a8fac845180aabff07bcd017045b3266b3163a1ed0030bcb91cfe29918

  • SHA512

    83a04806a8e02ba388ae72d680c0bc1ab03d393b0b4716c4fc0658ad4934297a7175794a6d75cce656e60051ce5d73428083177b575469b8c26c881311c9a33f

  • SSDEEP

    98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmDkV6:mMD+cpvJ/4H3nmghWoa/fsysMF4JD855

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b6d49a8fac845180aabff07bcd017045b3266b3163a1ed0030bcb91cfe29918.exe
    "C:\Users\Admin\AppData\Local\Temp\1b6d49a8fac845180aabff07bcd017045b3266b3163a1ed0030bcb91cfe29918.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    650B

    MD5

    955032ea234a6e499bfd8cab28a7acad

    SHA1

    a8c45e86ed9e7daad89dad848ca16b5527f803a9

    SHA256

    19636d8fdf76a305babf51c230ff3e5cb4ba74edb91b9acf68ef12cf8a8b28fa

    SHA512

    b24b2ce47d1ef144e168094d201fec926cf5d5671b3d8a7a1658e7a9f22561ba9fc3c84261e3b7440720748faf4e13584085c46bd8d7422d7b776161530fc262

    Download Submit
  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    3KB

    MD5

    dbe88581a05701b19e1d326fff431bdb

    SHA1

    61011ade5edab53a7e120e1e0e66f3b0effefeeb

    SHA256

    a963c0ddf1c286d3f41b9480e613fff63fa1e39232fe65bfc64068a600f7280a

    SHA512

    a22780ef0a844da93065731efc8399e584baf276aac82cd4e4bb0ccbec17135ea20fc845912a0a1a0a55651f4030a17f2ee00a002c61cc7850eed8468a9c033f

    Download Submit
  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log
    Filesize

    308B

    MD5

    d101b981aa5fdbfedcb9fbdc283e9e9d

    SHA1

    ba50ff28f4db5bd44990db53c988e3bf3f719866

    SHA256

    45cee2af5822cc177fac536aa0adf8962032ca966a80c21804443733acca306e

    SHA512

    8ae4b7a4d47086887a0b1a869e610027d23c04c1f30ae4781d500a85e60d1370063cc97be36c8a9dd6404fdfa8f0d1997a0048954e66ddd93f75b7e5db6afeba

    Download Submit