Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
22/07/2024, 23:00
Behavioral task
behavioral1
Sample
MalwareBazaar.exe
Resource
win7-20240708-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MalwareBazaar.exe
Resource
win10v2004-20240709-en
3 signatures
150 seconds
General
- Target MalwareBazaar.exe
- Size 482KB
- Sample240722-2y8xastfkr
- SHA256 d1263e088cda0c350f790e19f9db7e38b143e39e1138723811b89a7d85f53771
- MD5 98eb50dd3151fd1ccc97142cba064fde
- SHA1 dbe0c4da5419577b248ea167257653cea5c914fe
- SHA512 1fc54165d3a82b33186c48503bbda0afd692ad94c99275db62c78553e6df1c70a7ccbedb2219d6c2edb4e094ef05c962b2734d641f90e4a6f0e05e97038f2ecf
- SSDEEP 6144:2XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZoAX0cNG5Gv:2X7tPMK8ctGe4Dzl4h2QnuPs/Zovcv
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1348 MalwareBazaar.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1348 MalwareBazaar.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1348 MalwareBazaar.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\evferf\logs.dat
- Size 216B
- SHA256 d466f77332ab2e60ea60177c26074f2233f0f24db395595fea7a6bf8c5258d3a
- MD5 5cb7916d8eac727217590032c1faa837
- SHA1 1a00beb5b458e5a56a8f979caa25fcca7849f54b
- SHA512 5fa28963de82b1487c4856698e87a4a400eab200485c8c4a28e044ddba45dae949a3be37bab920ff6deb68eb0f08e372b1a966f22b8057efc92efc6283557b24
- MD5 SHA1 SHA512