cd1dcddf6ea2be0fbb49c500d1105c7eca52a2e5b917d7ddc06f9ddf9fa11ff1 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04/09/2024, 17:39

Sharing

Report Analysis Logs

General

Target

explorer.exe
Size

1.2MB
MD5

4197238224f8d3565a7e54c72bb8450a
SHA1

8b0e78f62bade56725bdb3b7be1b538dff79e075
SHA256

cd1dcddf6ea2be0fbb49c500d1105c7eca52a2e5b917d7ddc06f9ddf9fa11ff1
SHA512

e27cee72a5b959903bee3f3e8fa12ff28fe4b7443cb0935579fb0425ba2c6ad8155879057c21adf3e0132ceb4432b7211cfd8c39f6f7d6c0dea2f9f653a3d2fd
SSDEEP

24576:r2jbo3K4b3DEWaWOD2jn0HdGz6maK1PZQQTKarYM3M3Qjf2MslMucieKHmbfbf+B:r5K5LGbfbfX

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2084	explorer.exe
2084	explorer.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2084	explorer.exe

C:\Users\Admin\AppData\Local\Temp\explorer.exe
"C:\Users\Admin\AppData\Local\Temp\explorer.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-0-0x000000013FC40000-0x000000013FDDE000-memory.dmp

Filesize
1.6MB

Download
memory/2084-1-0x000000013FC40000-0x000000013FDDE000-memory.dmp

Filesize
1.6MB

Download
memory/2084-2-0x000000013FC40000-0x000000013FDDE000-memory.dmp

Filesize
1.6MB

Download