Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
26-05-2024 06:05
Static task
static1
Behavioral task
behavioral1
Sample
3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe
Resource
win10v2004-20240508-en
General
-
Target
3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe
-
Size
5.7MB
-
MD5
cd4ea39e30a7926dfcd6e7521c2c9cbf
-
SHA1
35dc0022b3cc18fc4b3775b36cbc090977662d21
-
SHA256
3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a
-
SHA512
e13310ff5a2bc0d69b2fd340d6bbb744828d157979b11f79217b504667efa8cdbbb052137522100cfabe9b801716699d85afec675aa8987e51faa737cf6e9026
-
SSDEEP
98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmmkVQ:mMD+cpvJ/4H3nmghWoa/fsysMF4JD852
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5112 3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe 5112 3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe 5112 3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe 5112 3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5112 3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 5112 3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe"C:\Users\Admin\AppData\Local\Temp\3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5112
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
652B
MD58d7c94e55de1273acbb4aa6dc05b179d
SHA1c4d19c66bebeff6b82de86b30c27813b710e115a
SHA2566a03d4233000018a282ddcc0ca847f289a07819dbf75fe2ebb7f8107ddb399f7
SHA512e8bd8f4f33079bac714b3b61bd26d26c5ffe132a24952cee56d2a1818fdf9a50070ae387b9ccdb7a6bf1130d6683dd492be768461aa1a44f4c81ccc0eff6868b
-
Filesize
4KB
MD5e39885803e202e65d3848b049b5f2070
SHA1782669c61ea3f94ce87eeff71c3c628da625817f
SHA2562a623ac53c5f07e0a718cd3cbf4a0d63766e69feb6f0700264cd7d8057802af3
SHA5121c529de9e04c87f1412813df81511b1612d6b1a815e7dc21ea59649d0f8c0f8bbab81fdaf2e40ed0715c86fb919d5d4f2f0d00396824f8142698a89c2757be48
-
Filesize
310B
MD543136b10b5371ededf2f8bc3d2862db7
SHA1669198bed5461e0d66c8c38043ac39662dd33c58
SHA25682f9bada5165c61a075cbe99807a6a250fdf7f9a9022aed569bbc025db600cd9
SHA512bea8af893556730f90b3ea73ac36b667260f86c69c841e7e0a67f228c373d0660b28e3f1edbfe686dd2b884e42646b1582bb7d4dd1904a687c58e1aa46b413d7