Analysis
-
max time kernel
94s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
28-05-2024 17:20
Behavioral task
behavioral1
Sample
37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe
Resource
win10v2004-20240426-en
General
-
Target
37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe
-
Size
7.6MB
-
MD5
96a4da234085638221145fb7bfcd66c4
-
SHA1
b0d3088573294f67c343a7dd72acf9f5457965b7
-
SHA256
37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e
-
SHA512
f2e76af7764b1da5c96b4ed1bdb43bb93172ad4ff0da2eedae691274c0c87e63045701db6664e2548def2156ea1c5d8a76326996e157dc4215adc861ab69c032
-
SSDEEP
98304:38rgZSI1RA2XWQdkhUsdDwG1eFsr7/NPlcGxH0Ig17E3AAy5tx5KD/S8vmJT1aOU:3pRAAk6YDwGcsNtcGfcY3gtAI1ZcL
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exepid process 1452 37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exepid process 1452 37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exepid process 1452 37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe 1452 37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe"C:\Users\Admin\AppData\Local\Temp\37e6b738b634a18c778648fab88d48b8f1143b9a96561333135e4eb132961f9e.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1452