Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
29-05-2024 01:01
Static task
static1
Behavioral task
behavioral1
Sample
a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe
Resource
win10v2004-20240426-en
General
-
Target
a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe
-
Size
1.1MB
-
MD5
15b18cafa7132d39d8f9c1d0eea54ef2
-
SHA1
0d3c6239aafdaf93cec6f7ad230440fba58be7eb
-
SHA256
a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f
-
SHA512
a179c1691a5df2a408a64319ff32176cc07624f8bd543f7ee2cae0a50bd9d75a7bbbd57e42d786630c00cf029e9617571b2ac4fb17f680c65feac8716ec49397
-
SSDEEP
24576:eAHnh+eWsN3skA4RV1Hom2KXMmHalPwIKlVETwpTpyRehK5:Jh+ZkldoPK8YalYIKlPTpy8u
Malware Config
Signatures
-
AutoIT Executable 2 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral1/memory/1700-11-0x0000000000160000-0x0000000000280000-memory.dmp autoit_exe behavioral1/memory/1700-12-0x0000000000160000-0x0000000000280000-memory.dmp autoit_exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1700 a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe 1700 a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1700 a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe 1700 a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe"C:\Users\Admin\AppData\Local\Temp\a031e38dd4b3592bc6905486f06fd0f723932081001edae927977ce87c2ae58f.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1700
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
MD5ae52e8f2399a901c240a0f532d0f1313
SHA1c2c846e41ab83e69f16ab479bc64f1bad9ade497
SHA256e3f2d549c2f253e41d1b4919d23e50408a7a63a2e46ce861d6664b3232ee4b37
SHA5123e2184fa27ad1234ec1f42d99397d46b71a8d45a37a7f7b804db08e1313661cae55202ef08bb4318e8f4284e93bb24e609b6875e1456e1edc5fc127ad037834e