941cc44f629086310dba8c9e96ab55994f230eef6917a2e70ec6c9b698154d88 | Triage

Analysis

max time kernel
51s
max time network
57s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24-06-2024 12:13

Sharing

Report Analysis Logs

General

Target

DesktopOverlayHost.exe
Size

76KB
MD5

7057cab5e1d3d38d3d5a1f8f2f0cd7ef
SHA1

fa9d1eb814552f2dbfa4843f25cc6403e423473d
SHA256

d594b3870d81ffdcbda2cb630061cac915d239e921b4af7bf19c4fcb26ffceca
SHA512

d3b20f7aa0ecd825c80e6516e01e142613ebac2555dbacd9e16b5b3a30eeeb3d2b95492278842360f65606a6588fe580a0976571e9439e48eb0d46686a0ed53c
SSDEEP

1536:QHyIDtuLJ+R3LJ7tC3CL3xNOK2Rf+nVszNDtq:Qntue7oyL3xN32cVq10

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1448	DesktopOverlayHost.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1448	DesktopOverlayHost.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1448	DesktopOverlayHost.exe
1448	DesktopOverlayHost.exe
1448	DesktopOverlayHost.exe

C:\Users\Admin\AppData\Local\Temp\DesktopOverlayHost.exe
"C:\Users\Admin\AppData\Local\Temp\DesktopOverlayHost.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads