Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 01:26
Static task
static1
Behavioral task
behavioral1
Sample
a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe
Resource
win10v2004-20240226-en
General
-
Target
a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe
-
Size
1.1MB
-
MD5
4c969d67e0328109a1166043925b5d40
-
SHA1
b8f2e56373dd84b8582c2049dee80ee3921d84d5
-
SHA256
a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd
-
SHA512
2ccee640499fbf50d9834487db0db266a749b2a91c6ddbb9ad0aca2518b1f73474a9b1eb14d46e3c34b12b66a319cc312f59912c642ea164b6ef8752e0a7f630
-
SSDEEP
24576:FAHnh+eWsN3skA4RV1Hom2KXMmHaqR0s99o+ymsVteJ15:0h+ZkldoPK8Yaq7ZPcte9
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2172 a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe 2172 a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2172 a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe 2172 a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe"C:\Users\Admin\AppData\Local\Temp\a054f24359e1ba9648dbb33af62b2192ae804a9f321d312b31c928c56eeaaccd.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
MD5a28458b0421b95c149c124a984149a00
SHA1c8582d836d1f1b3ddd1b3440dc61041c73f4b5c9
SHA256966eeb85fd6606cf50e5d6b7d8680f83a532587e1cfddaca13eacc21f16eac6b
SHA512f78f85e96a96fe268d83c39f2e9b3437ac76861b5cdd092eb59963a45a4c5f7738363b3feea5109734d9fda9e6239c78d79792f7549c9870455749d4b0a528cb