Overview

overview

10

Static

static

5

Trojan.Win32.exe

windows7-x64

3

Trojan.Win32.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    15-09-2024 21:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Trojan.Win32.exe

  • Size

    1.1MB

  • MD5

    10b5e6b6127632c068263ee02fce3230

  • SHA1

    4694ebc1bf9fc5ce5f9b1dca54b9463bfb5228df

  • SHA256

    a3896ac68e642d9a9e8f95eeec58ad63841beaef1d6fe1a9165f9432d916bb9f

  • SHA512

    219a8aed9c8356b07ce29ce87ec88d50ce0fde9d00d568be0b5bb4729e48286bc8dda9aaf8ce36e6c4e6c7d1ba86d0fc63eac1fae4f01af57b9130c91da41b5f

  • SSDEEP

    24576:I4lavt0LkLL9IMixoEgeaeYB4/kv0p4J1VTCOYsq9MmCS:fkwkn9IMHeaeY+8v0YVXaPCS

Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.exe
    "C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2932

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2932-5-0x00000000003A0000-0x00000000003A4000-memory.dmp

    Filesize

    16KB

    Download