e6f951016eece124e7ba5957179d07f3420bb2b185d3fdff9fb2a10ed792cadd | Triage

Resubmissions

11/08/2024, 01:48

240811-b781jstdlc 3

11/08/2024, 01:39

240811-b23lksyfpn 3

Analysis

max time kernel
138s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/08/2024, 01:39

Sharing

Report Analysis Logs

General

Target

BurntSushi.exe
Size

8.3MB
MD5

887b877ab4532d4ef947d13a3aef9ec5
SHA1

b1b427b063a63893fa7a4f347e63bd1798284344
SHA256

e6f951016eece124e7ba5957179d07f3420bb2b185d3fdff9fb2a10ed792cadd
SHA512

866d87346b8c710c8f1f1f8558f216d2ef0c2d0409dc6e7cc4d0f902706c83c8faad3f4939c31e843c84fdd380bbe0fa9cc505b224fb407d9b0475dd3024c352
SSDEEP

98304:IkoFkdqXXIGYTLuk9rtleltFg1YGesO+nHYpwgX8+3ZgSvXR:IkeT4rAGeMHRgMGvXR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2040	BurntSushi.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2040	BurntSushi.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
2040	BurntSushi.exe

C:\Users\Admin\AppData\Local\Temp\BurntSushi.exe
"C:\Users\Admin\AppData\Local\Temp\BurntSushi.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads