Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09-09-2024 01:31
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
RunMe (2022_09_10 00_29_46 UTC).exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
RunMe (2022_09_10 00_29_46 UTC).exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
RunMe (2022_09_10 00_29_46 UTC).exe
-
Size
1.1MB
-
MD5
0e4afc55e03f8fe26d82e054004c16a3
-
SHA1
e5560a6d10d11e84eb094561ae1ec1c4461dd2c7
-
SHA256
d250df329d47be781f3c765a861d5419679ff01ac8edfdb148e95c16e2b0300e
-
SHA512
48c59b1763cd387a8c5822a2848bce677200b498a9971c4091fc1c5ec8a8288fcdde3c439db830a9ca2a6e2b87c2fc399753e79e3714db33a154e189e75e1e1f
-
SSDEEP
24576:pRaZROMOm8FN7TjsPnzt2heeRhQbJEOeamTHeqtGHi:zkxOm+7TjsPnztyDMmaaHeqty
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3044 RunMe (2022_09_10 00_29_46 UTC).exe 3044 RunMe (2022_09_10 00_29_46 UTC).exe 3044 RunMe (2022_09_10 00_29_46 UTC).exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 3044 RunMe (2022_09_10 00_29_46 UTC).exe 3044 RunMe (2022_09_10 00_29_46 UTC).exe 3044 RunMe (2022_09_10 00_29_46 UTC).exe