Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-05-2024 06:05

General

  • Target

    3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe

  • Size

    5.7MB

  • MD5

    cd4ea39e30a7926dfcd6e7521c2c9cbf

  • SHA1

    35dc0022b3cc18fc4b3775b36cbc090977662d21

  • SHA256

    3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a

  • SHA512

    e13310ff5a2bc0d69b2fd340d6bbb744828d157979b11f79217b504667efa8cdbbb052137522100cfabe9b801716699d85afec675aa8987e51faa737cf6e9026

  • SSDEEP

    98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmmkVQ:mMD+cpvJ/4H3nmghWoa/fsysMF4JD852

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe
    "C:\Users\Admin\AppData\Local\Temp\3d1c2bc4387b338a49dac36317abbd7c56c09851802eb2d2dd705969911f8e8a.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:5112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    652B

    MD5

    8d7c94e55de1273acbb4aa6dc05b179d

    SHA1

    c4d19c66bebeff6b82de86b30c27813b710e115a

    SHA256

    6a03d4233000018a282ddcc0ca847f289a07819dbf75fe2ebb7f8107ddb399f7

    SHA512

    e8bd8f4f33079bac714b3b61bd26d26c5ffe132a24952cee56d2a1818fdf9a50070ae387b9ccdb7a6bf1130d6683dd492be768461aa1a44f4c81ccc0eff6868b

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    4KB

    MD5

    e39885803e202e65d3848b049b5f2070

    SHA1

    782669c61ea3f94ce87eeff71c3c628da625817f

    SHA256

    2a623ac53c5f07e0a718cd3cbf4a0d63766e69feb6f0700264cd7d8057802af3

    SHA512

    1c529de9e04c87f1412813df81511b1612d6b1a815e7dc21ea59649d0f8c0f8bbab81fdaf2e40ed0715c86fb919d5d4f2f0d00396824f8142698a89c2757be48

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    310B

    MD5

    43136b10b5371ededf2f8bc3d2862db7

    SHA1

    669198bed5461e0d66c8c38043ac39662dd33c58

    SHA256

    82f9bada5165c61a075cbe99807a6a250fdf7f9a9022aed569bbc025db600cd9

    SHA512

    bea8af893556730f90b3ea73ac36b667260f86c69c841e7e0a67f228c373d0660b28e3f1edbfe686dd2b884e42646b1582bb7d4dd1904a687c58e1aa46b413d7