3b61757c276c9f823c8d49f5322338891335c6ea17649ba0b39e36237d5d399d

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 12:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

49cccd30a564410d1f9bbce89fa15890.exe
Size

49KB
MD5

49cccd30a564410d1f9bbce89fa15890
SHA1

cc1bfc5f395dcb3241058bec5c656045ee17c944
SHA256

2dc0f0286e2fadda2881a1dd767d065493af87c6528e563804fa39e8618bf447
SHA512

70a983b5b01227ec9d14cb852d9e5235883dc872420b55999e65f0633b599a106a04f7bc6f0c9ef091858ed334d410f4cdc903425cdedf614bb569a3e4f99398
SSDEEP

1536:iTdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5lm:sdy0znnbpDlszC

Score

1^/10

Malware Config

Signatures

Modifies registry class 4 IoCs

Processes:

49cccd30a564410d1f9bbce89fa15890.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8}	49cccd30a564410d1f9bbce89fa15890.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8}\ = "ttrlsceqkqlshcse"	49cccd30a564410d1f9bbce89fa15890.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8}\LocalServer32	49cccd30a564410d1f9bbce89fa15890.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{628C776C-0647-96B3-38B5-1EF4D22049D8}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\49cccd30a564410d1f9bbce89fa15890.exe"	49cccd30a564410d1f9bbce89fa15890.exe

C:\Users\Admin\AppData\Local\Temp\49cccd30a564410d1f9bbce89fa15890.exe
"C:\Users\Admin\AppData\Local\Temp\49cccd30a564410d1f9bbce89fa15890.exe"
1⤵
- Modifies registry class
PID:3436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3728 --field-trial-handle=3136,i,3192284747741020952,1225278682167953346,262144 --variations-seed-version /prefetch:8
1⤵
PID:3464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3436-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/3436-2-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-1-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-3-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-5-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-6-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-7-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-8-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-9-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-10-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-11-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-12-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-13-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-14-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-15-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-16-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-17-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-18-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-19-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-20-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-21-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-22-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-23-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-24-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-25-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-26-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-27-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-28-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-29-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-30-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-31-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-32-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-33-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-34-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-35-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-36-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-37-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-38-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-40-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-41-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-42-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-43-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-44-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-45-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-46-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-47-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-48-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-49-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-50-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-51-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-52-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-53-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-54-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-55-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-56-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-57-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-58-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-59-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-60-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-61-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-62-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-63-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-64-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-65-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download
memory/3436-1096-0x0000000000540000-0x000000000055E000-memory.dmp

Filesize
120KB

Download