Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
16-12-2024 07:26
General
-
Target
SAH0987800/SNKW976780090.exe
-
Size
529KB
-
MD5
a3aa7f4daceddd1ec8b2d9dbcfcf3018
-
SHA1
6955a629c7b2b1fbe7ab8822814f52c1d1e2ea92
-
SHA256
b4bea581890a1f0e57955751fff4878328d67e3ac7d7b825d8f7ef07603a4a82
-
SHA512
e9223cd43b05b111c5f1f44e53a7296a223815f2d6e5aa373e8e11613eebd6dfd01c1998d67934b5dc76d1639f4a06a32e11d2bcd98969d34770f92ed7631b60
-
SSDEEP
12288:BquErHF6xC9D6DmR1J98w4oknqOOCyQfATt2vFKQ:Erl6kD68JmlotQfPKQ
Score
5/10
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SAH0987800\SNKW976780090.exe"C:\Users\Admin\AppData\Local\Temp\SAH0987800\SNKW976780090.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
4.0MB
-
Filesize
1.2MB