Analysis
-
max time kernel
153s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05-03-2024 20:39
Static task
static1
Behavioral task
behavioral1
Sample
574d3a13874d3dfb349f30a056da918d80917b31c75046e751fc3644db121bdc.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
574d3a13874d3dfb349f30a056da918d80917b31c75046e751fc3644db121bdc.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20240226-en
General
-
Target
574d3a13874d3dfb349f30a056da918d80917b31c75046e751fc3644db121bdc.exe
-
Size
67KB
-
MD5
8705f9c51b6f76bf18c51e20d51a8892
-
SHA1
a462802e60f1703def8837dacabc77c7f98e2874
-
SHA256
574d3a13874d3dfb349f30a056da918d80917b31c75046e751fc3644db121bdc
-
SHA512
ff370098eeae163f7720716eeaf9eed6982f9659dd0b14eca2dccc7581d49d98dc69feef98276f393ceaaef64d49cf9a59c878ecb5b626879bfbd90cfb853580
-
SSDEEP
1536:rferrLkSRoe8C4UZsys0Dh1duq4Romu/7q72fFI+PlE:rfi3k+oWDBDh1duq45L72uWlE
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\574d3a13874d3dfb349f30a056da918d80917b31c75046e751fc3644db121bdc.exe"C:\Users\Admin\AppData\Local\Temp\574d3a13874d3dfb349f30a056da918d80917b31c75046e751fc3644db121bdc.exe"1⤵PID:3756
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4340 --field-trial-handle=2240,i,16875000905773190493,11379096115878622792,262144 --variations-seed-version /prefetch:81⤵PID:1124