Analysis
-
max time kernel
134s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29-05-2024 03:36
Static task
static1
Behavioral task
behavioral1
Sample
54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe
Resource
win10v2004-20240508-en
General
-
Target
54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe
-
Size
5.7MB
-
MD5
c42ec785d752e3863cdce44469185183
-
SHA1
94b0039e75b05e58c2c09bfa68c0f7c82f2a2af6
-
SHA256
54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202
-
SHA512
bb9af8ad306d67ae7499864e12930724170e2fabc6347e745d15e580f5bcf42db7b28c8cedeaa1c0bc88d35a34029fd7db79f8cc1c17e22de6f3c85aebf49032
-
SSDEEP
98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmqkV8:mMD+cpvJ/4H3nmghWoa/fsysMF4JD85+
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1988 54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe 1988 54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1988 54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1988 54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe"C:\Users\Admin\AppData\Local\Temp\54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1988
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
650B
MD5e17a89bf221d21dc5bb7125b3a92b1a5
SHA19e053588accf3edaecdbb3cd4c62e91496abadb5
SHA256bed473772ae4fb19d011f9305dffec44d59eaf8a53b70ff227e5fb2de6c0a97e
SHA512c5a857345532d448024aaa3b08e635818688156059be2f3dad002958debd80aad8f9677bd29ece5b717b6881eebc894cef1a993a3cc8d8e1370d92cee580a238
-
Filesize
308B
MD54be950990643518cfe9e220dd385d09b
SHA1a1795ff31a95dd015b32705b8e2df37b7a3d5ae6
SHA25608d68df8888d9186ccbcc460d6c922bc0500687d4fefadeddb305ecf59d48c76
SHA51231119a9bc1bff46c87aeb3e7012720bfa55619bff0f4b8ccc76900b9c10949e05072a0bb4c9dbaf71e5fab16736572c2a33fb6a72e9398ddb34f37ab0cc41b06