Analysis
-
max time kernel
133s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24-05-2024 12:48
Static task
static1
Behavioral task
behavioral1
Sample
5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe
Resource
win10v2004-20240508-en
General
-
Target
5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe
-
Size
5.7MB
-
MD5
afe8253f6429d633bfa47d2f6ae08a48
-
SHA1
e885c7af46ea763289b2bb689a5fc6b43bf7655e
-
SHA256
5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259
-
SHA512
f325bb1611d70c5a7e4ac32e8a2930884706b18d3cdfbdda77b521756a71d663413e944f0a40120bea4e9ee131f73d83c2737e78e4ae66b82efc8b2c19536e09
-
SSDEEP
98304:b/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmqkV5:uMD+cpvJ/4H3nmghWoa/fsysMF4JD85/
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5048 5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 5048 5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe"C:\Users\Admin\AppData\Local\Temp\5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
652B
MD54c8f0c9a581297659852cb40e81b5c47
SHA1d3a536f30648e5bda06677beeb07aff8747e70c4
SHA2565c08a78d342316dafaf260e57b67b4238a53ed6e02930b77bf766727a7394834
SHA512833ac4a80ce13634b7b11e98ebab5707db9d281a6e3dbe867732ddea4f33ab339f8603f484e5b0824e01e760b931f1cb4afc2a25ca01607d50fa0f63dd710d6c
-
Filesize
310B
MD5b571591c7d6ce827e1db98441ab497c6
SHA1b9142fed104f3af8ecacf60a3b0a96b90596359e
SHA2564ecd7056c3312a6d5516f8edad8058628078d5803bb3c7b26659bfedecff462b
SHA512c4469d04dc469099fa80ff4bb5c5cf172a193e3a9897c290299db69d8c85a089dbe9439218a155a3f417741ba2cdeda19e51fa2424800f12317a1d68fec6ebde