Analysis
-
max time kernel
140s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 04:49
Static task
static1
Behavioral task
behavioral1
Sample
bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe
Resource
win10v2004-20240709-en
General
-
Target
bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe
-
Size
6.0MB
-
MD5
ae65db8de36f1ca158d9ac4a613538c9
-
SHA1
1bac18e4cc6b85d573186e2c8894cd1be6918e4a
-
SHA256
bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026
-
SHA512
49ca8d4f360e649a36a388982fb883605b5dca95621f7be4ef4c6dc0b7fc17d295367cbdab428f02da77232f1c8b9dc772f9eb902e8bd4f5ef442e547e49ee87
-
SSDEEP
98304:1+VeEILLs9RePlunREyERv+eeNLo1iQVDUQ/sM5qTFiGGDxnFWE//:WGjRPSgz/ITFiGGP1
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 5 IoCs
pid Process 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe -
Suspicious use of SendNotifyMessage 5 IoCs
pid Process 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe 600 bcb89bfda5ba2c5248c36c592fa32399aa5177d1d02f2e1ed15ff43c06de5026.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
130B
MD5fcbb1db0e7855d1d2cfc420bb4ee6501
SHA11864e624b3f584a92618a30f1f9affaa247ac07b
SHA2560952d3a7e94cffa49d102a768ae4c390bd1de7f5338435a55fb340da9be165e5
SHA512ed982f75b3d2e9909681986ab6d2066f53512ff01e143659eaffa5b3b459782b8cc0c3a8eac3fd6811dd19d7aa29cc76be1c488aeebe877edaad41de2e949fe5