Analysis

  • max time kernel
    133s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-05-2024 12:48

General

  • Target

    5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe

  • Size

    5.7MB

  • MD5

    afe8253f6429d633bfa47d2f6ae08a48

  • SHA1

    e885c7af46ea763289b2bb689a5fc6b43bf7655e

  • SHA256

    5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259

  • SHA512

    f325bb1611d70c5a7e4ac32e8a2930884706b18d3cdfbdda77b521756a71d663413e944f0a40120bea4e9ee131f73d83c2737e78e4ae66b82efc8b2c19536e09

  • SSDEEP

    98304:b/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmqkV5:uMD+cpvJ/4H3nmghWoa/fsysMF4JD85/

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe
    "C:\Users\Admin\AppData\Local\Temp\5d5a6ce5d5cf16a2f0229661c498d77aaa5894c4cd0ae7689251f7f8f7dfa259.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:5048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    652B

    MD5

    4c8f0c9a581297659852cb40e81b5c47

    SHA1

    d3a536f30648e5bda06677beeb07aff8747e70c4

    SHA256

    5c08a78d342316dafaf260e57b67b4238a53ed6e02930b77bf766727a7394834

    SHA512

    833ac4a80ce13634b7b11e98ebab5707db9d281a6e3dbe867732ddea4f33ab339f8603f484e5b0824e01e760b931f1cb4afc2a25ca01607d50fa0f63dd710d6c

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    310B

    MD5

    b571591c7d6ce827e1db98441ab497c6

    SHA1

    b9142fed104f3af8ecacf60a3b0a96b90596359e

    SHA256

    4ecd7056c3312a6d5516f8edad8058628078d5803bb3c7b26659bfedecff462b

    SHA512

    c4469d04dc469099fa80ff4bb5c5cf172a193e3a9897c290299db69d8c85a089dbe9439218a155a3f417741ba2cdeda19e51fa2424800f12317a1d68fec6ebde