a148412a5c1cc9aba0ecdbb3e44010aeac75b40f23492bd04c0127e558aa44ac | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 19:22

Sharing

Report Analysis Logs

General

Target

OfferBox.exe
Size

1.9MB
MD5

2e33eb8d43cf15ec73e45baa0df06191
SHA1

34b8c49e032c4dd5f4245d6f2b2386628bd9c927
SHA256

9b1a56f7c746fd7a1c4113040e5c1b7abf90d77db448508989ed85d5bf589881
SHA512

3c20b01abc639d8f1496ac728af4e58b774e026ce4f146235c5d48d05ed580326bbe040a09639a40bad216e702034e10861d657d3b406a90f10d02a85b16b038
SSDEEP

49152:Ix6lzqFI7E2Z52MiLC288T8tRcsucD7uaHYDtR+/c0cayU:oZI7EVMb288T8tuxcGaQtROJ

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
2684	OfferBox.exe
2684	OfferBox.exe
2684	OfferBox.exe
2684	OfferBox.exe
2684	OfferBox.exe

Suspicious use of SendNotifyMessage 5 IoCs

pid	Process
2684	OfferBox.exe
2684	OfferBox.exe
2684	OfferBox.exe
2684	OfferBox.exe
2684	OfferBox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2684	OfferBox.exe

C:\Users\Admin\AppData\Local\Temp\OfferBox.exe
"C:\Users\Admin\AppData\Local\Temp\OfferBox.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\OfferBox\config.xml

Filesize
11B

MD5
eaf003049440ae581a82bbe5044fec5a

SHA1
d27464284670572b4f23b56f607fc5e6c455d804

SHA256
b40d6e47f206a46eef85dff0a9e238e150fd514e5d3c36e35787d6019404ab8a

SHA512
40b3d3a1e2734b0d7c7cfcbb32fe02ac2ed22bc1ca2e202148f28b25fb2877a5c38316ef9406c2e28b436700ade8a023de200349c3cd07f5d3b2775d7d19b9dc

Download Submit