Analysis

  • max time kernel
    134s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-05-2024 03:36

General

  • Target

    54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe

  • Size

    5.7MB

  • MD5

    c42ec785d752e3863cdce44469185183

  • SHA1

    94b0039e75b05e58c2c09bfa68c0f7c82f2a2af6

  • SHA256

    54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202

  • SHA512

    bb9af8ad306d67ae7499864e12930724170e2fabc6347e745d15e580f5bcf42db7b28c8cedeaa1c0bc88d35a34029fd7db79f8cc1c17e22de6f3c85aebf49032

  • SSDEEP

    98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmqkV8:mMD+cpvJ/4H3nmghWoa/fsysMF4JD85+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe
    "C:\Users\Admin\AppData\Local\Temp\54a77b45cd6ba395b5c700483e1d64a4d288304de8bc465efd8ab871129aa202.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    650B

    MD5

    e17a89bf221d21dc5bb7125b3a92b1a5

    SHA1

    9e053588accf3edaecdbb3cd4c62e91496abadb5

    SHA256

    bed473772ae4fb19d011f9305dffec44d59eaf8a53b70ff227e5fb2de6c0a97e

    SHA512

    c5a857345532d448024aaa3b08e635818688156059be2f3dad002958debd80aad8f9677bd29ece5b717b6881eebc894cef1a993a3cc8d8e1370d92cee580a238

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    308B

    MD5

    4be950990643518cfe9e220dd385d09b

    SHA1

    a1795ff31a95dd015b32705b8e2df37b7a3d5ae6

    SHA256

    08d68df8888d9186ccbcc460d6c922bc0500687d4fefadeddb305ecf59d48c76

    SHA512

    31119a9bc1bff46c87aeb3e7012720bfa55619bff0f4b8ccc76900b9c10949e05072a0bb4c9dbaf71e5fab16736572c2a33fb6a72e9398ddb34f37ab0cc41b06