Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
24/05/2024, 04:53
General
-
Target
e64a0567b7fca47ae4cfd0074685ec52369fb958091ab6061291e66a70539173.exe
-
Size
6.6MB
-
MD5
4ac3e74e3c2294554d7f22c220a78946
-
SHA1
9875b06743d0129716069b26b2a7c2a4a95c632b
-
SHA256
e64a0567b7fca47ae4cfd0074685ec52369fb958091ab6061291e66a70539173
-
SHA512
5e874baf5069d8dd0f1b343c12d0dcd9a64bde50e4fe273bacd8862a157d54907f482eccda1afe8877120b419ec09e89850bd34a47b4fc7a00a1cda24314885b
-
SSDEEP
196608:NWE+fd2SdGbBPt6hrV3VJO343sZcgDgl8Ud9X/:NW/doPchrawsZFTK
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e64a0567b7fca47ae4cfd0074685ec52369fb958091ab6061291e66a70539173.exe"C:\Users\Admin\AppData\Local\Temp\e64a0567b7fca47ae4cfd0074685ec52369fb958091ab6061291e66a70539173.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx