Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 01:59
Static task
static1
Behavioral task
behavioral1
Sample
3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe
Resource
win10v2004-20240508-en
General
-
Target
3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe
-
Size
1.1MB
-
MD5
57b103708d48a606283b50b9f02effa1
-
SHA1
12bda6495b055744cdbc90b923d173d971d2e911
-
SHA256
3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971
-
SHA512
dc0518ecd8f80cb73c9a8818ccea83036894c147970672b30e8fc70a40fe452cbdb2fc4bfb903e35de7784e5076e159321b73e9831062cd3d844c625e002c418
-
SSDEEP
24576:rAHnh+eWsN3skA4RV1Hom2KXMmHa2j+38Ff79flV+z5:Gh+ZkldoPK8Ya2qAf7xlo
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1904 3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe 1904 3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1904 3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe 1904 3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe"C:\Users\Admin\AppData\Local\Temp\3a75fb4d55ecf3434b2efaa95586e88ebb354908ba64007ad660abd022d1a971.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1904
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
268KB
MD5326eddd19eefa2ffce86e9a9626a1b37
SHA109206179ebe2889b3d9d26d3c6c72c9e87f27a6d
SHA256c096234fdda1ca5022dd6510fa49ec1be4182d13a9a934b6e112bbbec2f99198
SHA512235678b564903fc4953fb421673e617dfd47d2a5df3677c8c9f0623525603bb54de31629643f682d093c467738a5e88b8d024a53e2e2d441373a2c003880de89