713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-06-2024 07:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe
Size

5.7MB
MD5

18ac85f7b58aceafc3392b541fd805ec
SHA1

f52ffcb05f8503984dfe37c74926b9c55327c345
SHA256

713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63
SHA512

8a8191f8c5f00b19f6e1418c292dc855de32ff736fa7b9ff93038fb45afa62ce204e99cd53ebca4528e4ce33ce76e9c01398fd52068b73fa6744a92e58236caf
SSDEEP

98304:b/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmJkVq:uMD+cpvJ/4H3nmghWoa/fsysMF4JD85t

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
2800	713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe

C:\Users\Admin\AppData\Local\Temp\713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe
"C:\Users\Admin\AppData\Local\Temp\713d3ee9038d00d22538ac3754c0bcb026dcc2e58d5bf1c0c82693c39ab6ea63.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

Filesize
577B

MD5
01907fded19162c53b1d06ac9a3dbeda

SHA1
84f3828af877bd77bf5ff99566349e47d0021ebd

SHA256
6a15e66f5954cbf94a0035539091ae91545e088ba5e66744e2f33679245674b6

SHA512
e5448aa55c1569d64da73abee68cc2e6d821464af428fe00b992784cadf6d178923e91d7059447bb8badbb9a7481d1935e5fd89f42ed095c73a906007f9be3e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

Filesize
2KB

MD5
f410cf5c38e379bde318772450d3483e

SHA1
df696acf4143bdddafddeb13cd59c6a09b760130

SHA256
14ac53a672eb28c0f665c0e285a821853dfef890682100b843dde106f69944c6

SHA512
e75ed81913902be538f8ca8f9630c92b7e16b9ca5f42d23676c61c6556a6917aceacd1c74be1b43190bf98079d6ce0113887f22e4107ff6e9edc45befbc327c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

Filesize
4KB

MD5
16f2ce0b9650432dfbfbf8d27befe4b7

SHA1
bfb89444abebf1c2be7475e90c4e74261e1d2d00

SHA256
93d98ddf0d249acb63fe6e89fc8f14caf7c6408cf66eb545c090f60f4f64bfe9

SHA512
0a11a67de77e6d064a3db30c84ec19ac85e1657ff734d93b6c0de978a1258a562ba3eee6a864e15f6b35054b31b512fffedce834402a23618a21422b784b03de

Download Submit
C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

Filesize
308B

MD5
d75f1dc698c957ae9c64dbeb2415edef

SHA1
e081ca5543e11e7201507ba1b59468048e0a8f7c

SHA256
37abcc790cb2a1700a7af3ddd0890eb1522e699e74af094d0c4f4c71c629ec7d

SHA512
0281f1c13f78896c84db4b254222571dd1b83b61b48310bc4d0f1cee2de245ffa54313ccc4b747698169f6c5f8dce5f775243e65fa62c8a27526cad086f4bd59

Download Submit