cf864f7afbbb20b3ba416cd93a96d2d89064bdd7a53580fb2890e5947c2d82ab

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
13/09/2024, 12:08

Target

cf864f7afbbb20b3ba416cd93a96d2d89064bdd7a53580fb2890e5947c2d82ab.exe
Size

422KB
MD5

077727e2c1877bf34967de4a79afefc5
SHA1

e2b2140926ef9d34261d8f692cd79e8cc8b1fa16
SHA256

cf864f7afbbb20b3ba416cd93a96d2d89064bdd7a53580fb2890e5947c2d82ab
SHA512

a59a32c1f07d3ec5593661c09f821de8e893c3d2bad7d268a76d13dce087fe62d3d514428e5133007db9d9a7370d1e18b4c71ea58fa89b244dd365e47c000285
SSDEEP

6144:pIYDcBd2zXrfL4IRRnlqa5qhS02AdZVXKDxLIAzX0bqWRm1Au+:pIYDmcXzfRlqs8SGdDKDyK0MWv

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1540	cf864f7afbbb20b3ba416cd93a96d2d89064bdd7a53580fb2890e5947c2d82ab.exe

C:\Users\Admin\AppData\Local\Temp\cf864f7afbbb20b3ba416cd93a96d2d89064bdd7a53580fb2890e5947c2d82ab.exe
"C:\Users\Admin\AppData\Local\Temp\cf864f7afbbb20b3ba416cd93a96d2d89064bdd7a53580fb2890e5947c2d82ab.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1540