Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
05-07-2024 01:03
Behavioral task
behavioral1
Sample
137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe
Resource
win10v2004-20240704-en
General
-
Target
137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe
-
Size
732KB
-
MD5
a596ebd2dbfeaf87999c3893b73eebd5
-
SHA1
a04f86b9a7a634b0af8701cd12ce92cb14a70738
-
SHA256
137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289
-
SHA512
22f3a8a15bf9249d70e44e299a09b4bbed00fb35337a342d67f54fc757698f6627e2235fc05e11ddc4acba9fa1854918eec0e5f42cf6ee6c04667ea7187097ea
-
SSDEEP
12288:SYV6MorX7qzuC3QHO9FQVHPF51jgcKAPKK9XUhk5JWsGS3PVxU7kg:hBXu9HGaVHKASRylGS3PE7kg
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2028-0-0x0000000000D20000-0x0000000000EBB000-memory.dmp upx behavioral1/memory/2028-13-0x0000000000D20000-0x0000000000EBB000-memory.dmp upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral1/memory/2028-13-0x0000000000D20000-0x0000000000EBB000-memory.dmp autoit_exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2028 137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe 2028 137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2028 137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe 2028 137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe"C:\Users\Admin\AppData\Local\Temp\137cc4e18cc512d1c430b3760b746755080a945b0394975e1f1101831eb89289.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
279KB
MD55082f49273bca6b4d3a7a91e73209066
SHA144480396528361be362f97e5ceef5dc951b61c0e
SHA2562ec01568cd0e97046f31d649cef6a020c4dfedbf0a41454cc9548b00ba070a4f
SHA51247c35f2da93bb0fad46018392b042b972da18bb5bad2d4d1844b91bdcf09b106b65082c728a72254579193138566b569a02a810ca5d67b50e9181ea574f8acb2