Analysis
-
max time kernel
110s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
04-03-2024 12:18
Behavioral task
behavioral1
Sample
824-2570-0x0000000000400000-0x000000000043D000-memory.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
General
-
Target
824-2570-0x0000000000400000-0x000000000043D000-memory.exe
-
Size
244KB
-
MD5
910d0e2374652e74512feccbf84e3615
-
SHA1
145e804bb9a63767d7c855a6e50a7ac71e528933
-
SHA256
61b3b0df9652b50d6c8b00ef6879a12b9d79b64d815cc3c051b91fffd838377f
-
SHA512
92ae155902303f1372244bcf78d3c275cb6b2212c86f7f858799936479038c44b4968f45076c0fcb58f06071ddf7cc6fdcabb773f3851f4629c2ac99cfbefc7f
-
SSDEEP
3072:Um/E8k9ZjpIL+zNch12KbAwSaSkJSp8Fb8EG:N/E8k91zz6/t38EG
Malware Config
Processes
-
C:\Users\Admin\AppData\Local\Temp\824-2570-0x0000000000400000-0x000000000043D000-memory.exe"C:\Users\Admin\AppData\Local\Temp\824-2570-0x0000000000400000-0x000000000043D000-memory.exe"1⤵PID:2032
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4168 --field-trial-handle=2280,i,8281149332300504990,9122875031903898779,262144 --variations-seed-version /prefetch:81⤵PID:4820