Analysis
-
max time kernel
9s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system -
submitted
15/01/2024, 04:56
Static task
static1
Behavioral task
behavioral1
Sample
ipfsvc.exe
Resource
win11-20231215-en
General
-
Target
ipfsvc.exe
-
Size
531KB
-
MD5
3990cf7d237109b59546782a24d80dde
-
SHA1
31da0899ca9700810197ff2c90f7c472af9c8ebe
-
SHA256
df8c4fa2444502a990eabece94ae382bd22c3a74b4e97bb21e99f61426ca6f3b
-
SHA512
9e1a42a7058f1ffd35e1551d07e1057a4a85a6709b654369e1a3369bcefeb0a3dbf5f776e725578332a51d777199e5f5ae1432de3a28b4e85e7380236cd137a0
-
SSDEEP
6144:OymEzvq7NKCokOvNEBOis3zxaHliJYMbmkpENc2PaFMTjsEkKL9O0fFF28z:Ztvq5KCokOveB2wAYMbmS0W8z
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\ipfsvc.exe"C:\Users\Admin\AppData\Local\Temp\ipfsvc.exe"1⤵PID:4964
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵PID:1180
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Filesize12KB
MD538e92c1fac5c9af67a812bb07c1ace03
SHA10a60f05added0f825bae6afc188d7512557ee185
SHA25625779c1883ab7360a7342f64c68d93c672bf1a5827244d20ba73f44908cb0f45
SHA512afff3e1f11daf39bf2ab1fff9d54a61362ef8354ac5496127a4e1d3a9c1b722feb7fdd2ed567519ba68f317dd049c5b55e58522c9609194f8c56af20121baef4
-
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Filesize12KB
MD5d619fb20a71feb79f076abc1731b6c4a
SHA1da1cf16653d5938673c1a64d9a390e0b079565e6
SHA25654809e126456c60dc3d38a26f20344578c03e6750ea97e8eb7d9cf07c46ac752
SHA5127bb35aad061bcb19bc4fb7ef8319f6075a7ef99811213b246f4e5e91aaa8d6838a9b4108cf4cd45f83b5c4e565340a745fd1501a00015f3af537050326c46269