1033ae0d84ffe67b1ce97be7e5543c269b720f0591025315d5cb6abff379225f | Triage

Analysis

max time kernel
1s
max time network
1s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30-05-2024 13:53

Sharing

Report Analysis Logs

General

Target

Lightshot.exe
Size

907KB
MD5

bbcda77f5d80bcff9dc400fa580c79d7
SHA1

026e52f062e9c7ed0974a31dc37c2d3ab1f2a5a9
SHA256

1033ae0d84ffe67b1ce97be7e5543c269b720f0591025315d5cb6abff379225f
SHA512

eee0345baf9cc08a6f9527cf2f75dcca96ca6d0ac5044905dc02cdec28a7b9c57523e913e6624f276518fa0fed650016128ca071b02e76fc2bbe6cb2cb991dfe
SSDEEP

24576:vGzl9+a4Ne1nEFI56xU+0IdY2Zv952uetfbFEzP4UFhOpEc:v+tOWnEFZR0El0JEzQAhYF

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1984	Lightshot.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1984	Lightshot.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1984	Lightshot.exe

C:\Users\Admin\AppData\Local\Temp\Lightshot.exe
"C:\Users\Admin\AppData\Local\Temp\Lightshot.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads