Analysis
-
max time kernel
79s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 18:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe
Resource
win10v2004-20240508-en
3 signatures
150 seconds
General
-
Target
aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe
-
Size
96KB
-
MD5
54fc02d570cead40089c747871499fa9
-
SHA1
bd86762b008a5289ab8af8ee776f80937b16a8e0
-
SHA256
aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda
-
SHA512
1d7e174985bf72ae11ac33fade24e55fd01b90de43a0fab1c96da5be97f23298183feb838703d8777395df20a18dbdd90a38ea0fa422bbb7d17f63b14ce7c72b
-
SSDEEP
1536:34awKByO4iEgpvfzWJkU1igcolAF4zZNtJMrIxKv2:3zwKsawhxk2
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2664 aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2664 aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2664 aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe"C:\Users\Admin\AppData\Local\Temp\aae9b0462f02234b77fa3081e4db7b97264eef4954f1e4ac0afaa592605becda.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2664