95dbd294f511335bb0b368c487abe48e8d72aa4b165cba94d32cef71a5e46916 | Triage

Analysis

max time kernel
1799s
max time network
1482s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
21-08-2024 19:34

Sharing

Report Analysis Logs

General

Target

SbieCtrl.exe
Size

3.2MB
MD5

8d678d2d08fc83abda7064903c0cb0dd
SHA1

3244f38b720fd95ff3dced0db4a77da25cb7a098
SHA256

c3da60381751b387a09f7ffc045379783e5d9975ad3e2521aa893f1bb7b02e53
SHA512

b76b6e74f82280e823af2498d3acd7d70f701cc16ce35c0fd8c0b5a97804c0fc4359876a5726ab8bc0c0ff69664e633fbd867a575f12d9cb170c7b12121c73fa
SSDEEP

49152:IV5dT9dkI2f7IwfOFOUhpxTNnpL2xtIQYkPjGObfvES3xoRZAamMPtKLUIH27CYG:IJfWxtIRWfvEqoiMPALUIWWYijZ

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

SbieCtrl.exe

pid	process
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

SbieCtrl.exe

pid	process
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe
3560	SbieCtrl.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

SbieCtrl.exe

pid process

3560 SbieCtrl.exe
3560 SbieCtrl.exe

C:\Users\Admin\AppData\Local\Temp\SbieCtrl.exe
"C:\Users\Admin\AppData\Local\Temp\SbieCtrl.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads