Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03/09/2024, 09:07
Static task
static1
Behavioral task
behavioral1
Sample
08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe
Resource
win10v2004-20240802-en
General
-
Target
08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe
-
Size
11.2MB
-
MD5
5f98319d286c6f45b6cb998d4bd46806
-
SHA1
2e077900b009a105e57f921fb4b5f9dc81caedb9
-
SHA256
08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f
-
SHA512
511da3cbabfebfd9159d55a9741a434238277e62331d34d8a18caf40048dfa1e1be7b4a71e570419087f46be4f40f4351e0ab0c6787ae6e418847964df63749c
-
SSDEEP
196608:B9Vx2uCgggfj+gF9Z5jdKAH7ICc4sI5n+/8IfjQH7Uzh/ayarkg6n/u:2/RGJVdKsYoTeh/+4g6/u
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2556 08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2556 08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2556 08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2556 08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe 2556 08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe"C:\Users\Admin\AppData\Local\Temp\08a0b63d8e181e6ed9e254fea9649d2c328868286b2ce5956008a4793a1e092f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2556