Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
25-09-2024 20:31
General
-
Target
f3a3b04c8352d3109cbd5535653e3e5e3f40b7f016e9b2850d9eddc77d8bc75f.exe
-
Size
1.4MB
-
MD5
4f14ef9740420824d3b6b593b23faae8
-
SHA1
5969cf73425ec6f9fcd3ee77082907a94e1c288d
-
SHA256
f3a3b04c8352d3109cbd5535653e3e5e3f40b7f016e9b2850d9eddc77d8bc75f
-
SHA512
a0ddeda6bf7255aea8c7eab7f09db24e0e8f6db6f77c80bea5dc22808accf5ffe4fda7d7497fd5a87fb69daefe2ef0eb18a7cd1b15467672ad1cc2c5daa5d5f4
-
SSDEEP
24576:YzJrJmbDIWK8eRB7/imbdaBolL1Sui5f42ToUgyl/oq6SFVwRGxtuWCUOqHMiTTJ:YzxJmohdtbGold8ZkIo+FqUZCvqHzsNg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3a3b04c8352d3109cbd5535653e3e5e3f40b7f016e9b2850d9eddc77d8bc75f.exe"C:\Users\Admin\AppData\Local\Temp\f3a3b04c8352d3109cbd5535653e3e5e3f40b7f016e9b2850d9eddc77d8bc75f.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage