Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
02/07/2024, 04:16
Behavioral task
behavioral1
Sample
dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9.exe
Resource
win7-20240611-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9.exe
- Size 430KB
- Sample240702-evyktsvfqb
- SHA256 dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9
- MD5 8bf3285a4b28b8b22c28564c9971bb2f
- SHA1 904af62dec6d1754cf4c4e47ebab0de71ca64544
- SHA512 9cf33a7a9d2c7cf876a0d0401f2d5457ae9bbb3852882864293a17f129db89f0b8cad1c048d990aa2299f7a7f2732e304199932cba1b4894acbe125af3963345
- SSDEEP 6144:lCJBSkHyP4DivRrO+d3cyU6320ho4nbJAj0N91EU7ZUFbz68AO2RjXH7ScrF6B3:lCJB/RuFhU6ho0ej0N91HFAAR77uB3
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4328 dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4328 dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9.exe"C:\Users\Admin\AppData\Local\Temp\dee98ab3e4ffc2745188a643409ce07262f1c5754bf8a66ee94f2d09e2b5a2c9.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4328