Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
06-03-2024 12:29
Behavioral task
behavioral1
Sample
1208-93-0x0000000001E20000-0x0000000001E72000-memory.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1208-93-0x0000000001E20000-0x0000000001E72000-memory.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
1208-93-0x0000000001E20000-0x0000000001E72000-memory.dll
-
Size
328KB
-
MD5
a57abfc2d811b63ad98618a9d04d9ee9
-
SHA1
0dd02ba3ebfeed91edc262fa43595ef85ea901f4
-
SHA256
3378cf4aa22424cab8284474ccbef6d4d9a347b6a441dc68e70edd6f6f45d0b1
-
SHA512
c2dc690b7e561269d3cd365912fe7cfddf3ebc6973b6c7b434f797e40880d67e004334c5b8113d0c141c0ea6c7660fbdbf7e70167ec2450274e778b06032f143
-
SSDEEP
3072:RzbINhWl+CIbrqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnLCuUfFUYJZ6vzHktKoz:RzbUyootfDCvT4ZTXzCLCXUzcrKM
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1208-93-0x0000000001E20000-0x0000000001E72000-memory.dll,#11⤵PID:2540
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3684 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:81⤵PID:3060