Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
05-07-2024 01:43
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
Resource
win10v2004-20240704-en
10 signatures
150 seconds
General
-
Target
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
-
Size
1.0MB
-
MD5
bb389a943f133605637a7f4ef169a536
-
SHA1
2c17b46d0e2b5ee224fc1d33b056173ad9e306fb
-
SHA256
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b
-
SHA512
970ae275942716e6cd0ae744c3cb51ddc41c8cd80dace7c485be4acf88a880ec86616970dc36a17a8682008ded41d98a43cb3b61abeb2ec959fa47c9db78b6ab
-
SSDEEP
24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaky7B2xrLZbTb25:Sh+ZkldoPK8YakiQ1E
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes:
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exepid process 1968 adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe 1968 adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe -
Suspicious use of SendNotifyMessage 2 IoCs
Processes:
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exepid process 1968 adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe 1968 adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe"C:\Users\Admin\AppData\Local\Temp\adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1968-10-0x0000000000120000-0x0000000000124000-memory.dmpFilesize
16KB