Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18-06-2024 16:56
Static task
static1
Behavioral task
behavioral1
Sample
4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe
Resource
win10v2004-20240611-en
General
-
Target
4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe
-
Size
1.1MB
-
MD5
d59340afee53c8e993c22afe7ac53800
-
SHA1
59ac48c3c98d5cd67f411c556b97d116b4b4660a
-
SHA256
4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62
-
SHA512
d12249d36ee81ca1f39083d4c981735acf81ba1b91b4a2dae85e33ac0ce74fc3c971f118ce1d5baac47cb2336134fc668c54b7159b3e3b36047299b7c1602318
-
SSDEEP
24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaRdZTKdv6lbB7/p5:Sh+ZkldoPK8YaRStMbV
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes:
4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exepid process 1580 4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe 1580 4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe -
Suspicious use of SendNotifyMessage 2 IoCs
Processes:
4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exepid process 1580 4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe 1580 4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe"C:\Users\Admin\AppData\Local\Temp\4e1b00dd1374c6d922e8a141562bbf88f69961e3034a6158007cf2ced5c31c62.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1580