6d6366b05cc68b224d2a13c8841aa5f3b7356e1f6b8d8d28eea2d9d4bab40357 | Triage

Analysis

max time kernel
152s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07-03-2024 13:27

Sharing

Report Analysis Logs

General

Target

b8d748d2b77b134b71ffca23055871c0.exe
Size

217KB
MD5

b8d748d2b77b134b71ffca23055871c0
SHA1

c2feaa03f2f212d3a2ee9d7d882dd9ce8d5df3fa
SHA256

6d6366b05cc68b224d2a13c8841aa5f3b7356e1f6b8d8d28eea2d9d4bab40357
SHA512

fe95144f8550591b1ea5db1b83e3cedf376bd3535324a2fe887f2a2419b26cfeac181fd23a4ab3213a91d1db7ca84c300deadda1baa5c6fea9a055c292bfbb5a
SSDEEP

6144:upU0Myvcl/5+oEr9gYMaTz1++E7xMrSJ:uqXykTD2gYnIHCq

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2860	b8d748d2b77b134b71ffca23055871c0.exe

C:\Users\Admin\AppData\Local\Temp\b8d748d2b77b134b71ffca23055871c0.exe
"C:\Users\Admin\AppData\Local\Temp\b8d748d2b77b134b71ffca23055871c0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1044 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:8
1⤵
PID:4152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2860-0-0x00000000021D0000-0x00000000021F4000-memory.dmp

Filesize
144KB

Download
memory/2860-1-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2860-2-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download