Analysis

  • max time kernel
    134s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-05-2024 06:54

General

  • Target

    55532e6aa8774e79873445fdf85f647181e12c43a2714e42fde567397c247d17.exe

  • Size

    6.1MB

  • MD5

    5c38aead7733f5517b559bb493606e82

  • SHA1

    72e24201d52610f133382a55d96ac408bad4c594

  • SHA256

    55532e6aa8774e79873445fdf85f647181e12c43a2714e42fde567397c247d17

  • SHA512

    68af3b9efd6ba7fc0649c9c7186c3ef96a981ff2c4c1dcc404ece51841436db78ab2ba3e126000bbcca8f1511f2b96f45998a7b29f1c12381dd087b99d4846d5

  • SSDEEP

    196608:MMD+cpvJ/4H3nmghWoa/fsysMF4JD85lrkjiAo:MMFgXnU7sElry2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\55532e6aa8774e79873445fdf85f647181e12c43a2714e42fde567397c247d17.exe
    "C:\Users\Admin\AppData\Local\Temp\55532e6aa8774e79873445fdf85f647181e12c43a2714e42fde567397c247d17.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    652B

    MD5

    40b5f4d92e97be6e598f8cbf3184a5b7

    SHA1

    86f8d8cec8e22e9ac195e82aaf0159055a3fc0f3

    SHA256

    7212c85e58ec98757ca313af6b283ec8fbb1c37567d3fabb41f0681c2afd9944

    SHA512

    db2e1e56a9370f04d62a6d14516ad620dc0e19eb600c9d9d014a4e63039cb508d0ad76f2ff950bc215fec12f037aa422ab5a9f74e4341bcd8f98fddb05927936

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    310B

    MD5

    e6ef2d4e79f602da37ae3e6730263511

    SHA1

    f14db2aecccd4bb4720de7eb4653925c7f26c9c3

    SHA256

    4285aea2fd862d00eeab214a13029457147a421ef442dd9c7dfb7b692b7dae86

    SHA512

    a9580feda72c045558b6797350fb4b125b2bfba1cca908bcf7827a3f9f72c99dec44eece702ba4a5446b13769c84a56ae3799ba37361984db733c51cd1e900ce