Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
16/07/2024, 01:45
General
-
Target
Usermode.exe
-
Size
468KB
-
MD5
b8c77c5e20aa3b0537651ef588036d45
-
SHA1
b30cf7a9db7411eaf71e71506f8928b74e097d1c
-
SHA256
b3bd2613397c20fa5e713c36cbe68a5f6502878c52eab1ea0a994d4ab960832d
-
SHA512
1487be934810d0f41a1c5f3eeba34ffb01e88367e027e9017e993f5489847472caff94e6798795544246f7cf77bf7d0b3a2e9c37b63b9a3277ccdea708e8d1f1
-
SSDEEP
6144:hd3odBFGi27/idgm5lqU+1qdCAQ036dFDcArd3kXhi4XdLePE3ESP8n436C5gtRJ:viSm5k8UZ0qwAr+r5mE3EFnG5g7J
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Usermode.exe"C:\Users\Admin\AppData\Local\Temp\Usermode.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p1⤵