Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
02-06-2024 01:29
General
-
Target
f4085b40140a0500b17b6b1b20698af8c68a096ed072252d1e65d05286724972.exe
-
Size
806KB
-
MD5
6c495bef7c3b6622ff56e49822dc6796
-
SHA1
baa7611e5945ac6eff3038b1b2b0411a4aeb9c2d
-
SHA256
f4085b40140a0500b17b6b1b20698af8c68a096ed072252d1e65d05286724972
-
SHA512
90fc07fb95a3eea35d64a280d29607c844280cf6af1a575fdf506b04b10b4cd1428a5975e8c193c308f90a29f7b6f3be99c7c4d7195ec18a0717f779a8d67bd4
-
SSDEEP
12288:hYV6MorX7qzuC3QHO9FQVHPF51jgcratzbol4BP72dF3oVc6k0V80tx8lZb7yeCU:2BXu9HGaVHMboEUF3rVXa8Lb7yzU
Score
9/10
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f4085b40140a0500b17b6b1b20698af8c68a096ed072252d1e65d05286724972.exe"C:\Users\Admin\AppData\Local\Temp\f4085b40140a0500b17b6b1b20698af8c68a096ed072252d1e65d05286724972.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB