Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/06/2024, 00:19

General

  • Target

    b6dd8c53a46316e935aa5b31af4e91e472079b240bb43469146eab0e72597a4e.exe

  • Size

    5.7MB

  • MD5

    e3616da4e04a01c87ac47ae1b0237ae3

  • SHA1

    2fc6df82763f0015d97893f22a1f5a1db4cf63cc

  • SHA256

    b6dd8c53a46316e935aa5b31af4e91e472079b240bb43469146eab0e72597a4e

  • SHA512

    d7fb60a38ffa3b642f4f0c73c236c6c669bc28bacf7e3f737d616ec30f7537d50d0a8e275125de612852ff69de732e7d4c4fd0a4ef3fa2458b1f06c9ab369dcb

  • SSDEEP

    98304:b/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmVkVK:uMD+cpvJ/4H3nmghWoa/fsysMF4JD85R

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b6dd8c53a46316e935aa5b31af4e91e472079b240bb43469146eab0e72597a4e.exe
    "C:\Users\Admin\AppData\Local\Temp\b6dd8c53a46316e935aa5b31af4e91e472079b240bb43469146eab0e72597a4e.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:4560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    652B

    MD5

    a9ccf9107a76b9cdfd98ccc733d42a44

    SHA1

    00a655225fa3e3869609865cef09201a36607f12

    SHA256

    0f145c9a7ddf668aa181cedec5a9694080fafeaed35059ace9cfa6d1c7b61dcd

    SHA512

    466f3c53d0f9465fd9712836dfb4318ca3ac1235a7db7f23c04b396c3733bd862a4feb598fbe00f5142ded114923411a47a402a22d1fe6810b7313312229f5f1

  • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

    Filesize

    310B

    MD5

    9dc3de9a30fc8c5aca28af4df79d4935

    SHA1

    320d4f12104dc759a8e18359ef5ac0383879aaba

    SHA256

    17bd198d91713b5f63f532749bf02a314791eab64e9fe99139e3965639e95fb1

    SHA512

    421859e8410c28a87c8229cf27033ab980d05ba406c88e17f68165c83fe3b038716349bf59040da05b5737bf0e624a7cbaeb78c269b9446624c1ce058a6d9578