Analysis
- max time kernel
119s - max time network
120s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
09/06/2024, 15:58
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
0f399d1b3a7c6dd28867095c2bdb2098.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0f399d1b3a7c6dd28867095c2bdb2098.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
General
- Target 0f399d1b3a7c6dd28867095c2bdb2098.exe
- Size 1.1MB
- Sample240609-tevassch47
- SHA256 a49d396f7f272b32af4ef12abb52d5bc92ff2c97ca09b1d79436e13f1b9bf192
- MD5 0f399d1b3a7c6dd28867095c2bdb2098
- SHA1 ad22ee54a3f642a81ff9f48fbaba9af1f39c79b8
- SHA512 889e6e06eba7fcedfc0503203220073a8f1a07824185b859c93a4e107fdc347cf26e6424a58cd50d65c91959c5176471eaf050ca50d98cf265c91c94d38ecae6
- SSDEEP 24576:2AHnh+eWsN3skA4RV1Hom2KXMmHaueZzqHFotR95eTQ5:Rh+ZkldoPK8YaueIoF
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2140 0f399d1b3a7c6dd28867095c2bdb2098.exe 2140 0f399d1b3a7c6dd28867095c2bdb2098.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2140 0f399d1b3a7c6dd28867095c2bdb2098.exe 2140 0f399d1b3a7c6dd28867095c2bdb2098.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\misrun
- Size 264KB
- SHA256 ea59b47e1d041b58b06a03d1567e736b7abfd7118106c432ab484934824494d8
- MD5 cb375f8cd37172f4353c8da688508cf7
- SHA1 a515f2a7f10cd992685313054ea05339ac484408
- SHA512 bb0548d1836750526a5c3eefe0b769c07d96c47245010a856e630249874289ee06cbacfcf607ff2ca2c9ab9634cbf6d815d3ed3f419f557479a8b063a93aff4e
- SSDEEP 6144:ITGD6HllfZulE7NLFCbLPSqT7S2ACNFSqyFl5BipJB:ITGGF5Ml6NLFeFTrSl5Bip
- MD5 SHA1 SHA512 SSDEEP