19cfac8181f164ad29bd35d33c6389fa75fa7eea2066ce43b1e054e687b2fb34

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
04-07-2024 05:34

Target

test3/builder.exe
Size

10KB
MD5

137d103dc7344702225881a6feaa2973
SHA1

9e1b6463df775a95461887154902c4d4be1c70c1
SHA256

de981e5dae67e8e6be9ae3a4d004aaf91c934a9127085b42045c22a06723018a
SHA512

caeb84395d8897d82dd8dc0e14505309acb5588ce9e8a0e351674f325dd993bfb055238e5e70df6bb523af88dceb48c2b23fb29e2c26c4e716dd97debeb70752
SSDEEP

192:LGj2kSwai7DOC2k7/b9xqluwtDPC1ijWHwfb/s:PkSwai7Dkk7zqluaPqijWQfb/

Score

1^/10

Suspicious use of FindShellTrayWindow 3 IoCs

Processes:

builder.exe

pid process

3036 builder.exe
3036 builder.exe
3036 builder.exe

C:\Users\Admin\AppData\Local\Temp\test3\builder.exe
"C:\Users\Admin\AppData\Local\Temp\test3\builder.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3036

memory/3036-0-0x00000000742AE000-0x00000000742AF000-memory.dmp

Filesize
4KB

Download
memory/3036-1-0x0000000000890000-0x0000000000898000-memory.dmp

Filesize
32KB

Download
memory/3036-2-0x00000000742A0000-0x000000007498E000-memory.dmp

Filesize
6.9MB

Download
memory/3036-3-0x0000000005CF0000-0x0000000005E12000-memory.dmp

Filesize
1.1MB

Download
memory/3036-5-0x00000000742AE000-0x00000000742AF000-memory.dmp

Filesize
4KB

Download
memory/3036-6-0x00000000742A0000-0x000000007498E000-memory.dmp

Filesize
6.9MB

Download