Overview

overview

3

Static

static

3

2024-05-25...rd.exe

windows7-x64

1

2024-05-25...rd.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    133s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 08:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-05-25_21cf1bf8d3d13d49d8835e61168e9dea_megazord.exe

  • Size

    14.2MB

  • MD5

    21cf1bf8d3d13d49d8835e61168e9dea

  • SHA1

    9f882ac1af1f925241cca16fa0212c2721ac251c

  • SHA256

    fa581695e7ebc379d36dccfb1157958d953e0c600f4c9c62893e65fba0688c60

  • SHA512

    2c9a52b8fc754ad9ff6db77befef667f494a36e1158b4113776468d1113818cd2c30b73afcc8b5ef30d0816d0d9292a33a710f555b8876e3601f64cebb7644d0

  • SSDEEP

    196608:XE+4iXQ6PY9R3q3WfhR3XSaC9+10DTu/jp4YFg:XE+4iXi3qmyn41b/jp4Ig

Score
1/10

Malware Config

Signatures

  • Modifies registry class 9 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-25_21cf1bf8d3d13d49d8835e61168e9dea_megazord.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-25_21cf1bf8d3d13d49d8835e61168e9dea_megazord.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3704

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads