Analysis
- max time kernel
155s - max time network
163s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
05/03/2024, 22:48
Behavioral task
behavioral1
Sample
b5daad174d5c14ae334c04ae94972b97.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b5daad174d5c14ae334c04ae94972b97.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target b5daad174d5c14ae334c04ae94972b97.exe
- Size 687KB
- Sample240305-2rh3ascg59
- SHA256 e13c1c9a926f7da8c0fe1d85b44036cda373a2c20b81b2b6f807a0dde71ea4a0
- MD5 b5daad174d5c14ae334c04ae94972b97
- SHA1 3389da9269a34d4c455b55a771d71d5c01fdf4e0
- SHA512 1a18c06904791d3903e6ef91bd724fab488cf3ce591477754a0059abbd221276558484769a233b50c1ad2888982b22158044778d3d95697c84dd90c9d1799f02
- SSDEEP 12288:NC4f4+CH/a5pk9pOJudrzPwPJbO/5KmZH/jrjaFbezSc:o4f4VfawSkPW6/5KmZrrjaMzS
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2972 b5daad174d5c14ae334c04ae94972b97.exe 2972 b5daad174d5c14ae334c04ae94972b97.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5daad174d5c14ae334c04ae94972b97.exe"C:\Users\Admin\AppData\Local\Temp\b5daad174d5c14ae334c04ae94972b97.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2972
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4048 --field-trial-handle=2248,i,10247514684337323751,15511974759131734137,262144 --variations-seed-version /prefetch:81⤵PID:1832