Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
05-09-2024 10:13
General
-
Target
tmpf9b1mlq0.exe
-
Size
1.3MB
-
MD5
4fc0671d9cf60cea2b9c18f62d8df70f
-
SHA1
c822b60e69ed4d929e204327fe0081257d5f7ade
-
SHA256
0f766687ed47a181f2f7ee8e76f829f0be5760d032b62c170e26c09b5f8bd10a
-
SHA512
8b500e7d137162e32d0e09656a843f50cdb83b8ba160ae7ba6a46f870a3c3779eb9954571363af9cc1673d3ad341973f703e8902d960fc50295078768484f216
-
SSDEEP
24576:/y07u12dt5Cnx/3FCEKb+lINSO28Q3k+hlUj/geBw8yVyQtvi1UtNe9Mq9M:/y0MCt5Cnx/3FCEC+lIQO28Q3k+hEIe2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmpf9b1mlq0.exe"C:\Users\Admin\AppData\Local\Temp\tmpf9b1mlq0.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage