2b0a81c38f8a50530de18c0ff5f207739262155a4a309eac3d10f24e5079e7d1 | Triage

Analysis

max time kernel
359s
max time network
361s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/11/2024, 17:36

Sharing

Report Analysis Logs

General

Target

albiondata-client.exe
Size

11.0MB
MD5

9a7b8c20cfed880daab754eb83ac142e
SHA1

1179b7159088600976c2ae51fa8f198b392496e2
SHA256

d97c8068118239449cacbb252222f7d3248438752dfc43c82beb1af652da329f
SHA512

17566a227801518f08e51b7009a39e1a329aa10b978b1aacb364af5f9fc75e19a057ef15362fc0a051d85f5a74a3e3dd669e9a7561ae499c37dbda34c847ff05
SSDEEP

196608:rdblG2BVNDgnrM2QQTn7ecrCFPPNnaEzCbAsf6qt:i2rNDRQnCc0Q6q

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2420	albiondata-client.exe
2420	albiondata-client.exe
2420	albiondata-client.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
2420	albiondata-client.exe
2420	albiondata-client.exe
2420	albiondata-client.exe

C:\Users\Admin\AppData\Local\Temp\albiondata-client.exe
"C:\Users\Admin\AppData\Local\Temp\albiondata-client.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads