Analysis
-
max time kernel
153s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
07/03/2024, 19:01
Static task
static1
Behavioral task
behavioral1
Sample
b96ff0589a76eebeadc86d0729b3401c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b96ff0589a76eebeadc86d0729b3401c.exe
Resource
win10v2004-20240226-en
General
-
Target
b96ff0589a76eebeadc86d0729b3401c.exe
-
Size
673KB
-
MD5
b96ff0589a76eebeadc86d0729b3401c
-
SHA1
d691e5abe0df45d53f70f90a19dacbc9c7937614
-
SHA256
5b75a8634a19ddb4bdfd24e92cd09c4481b1de39c7391319cdab26563a2663bb
-
SHA512
0386e7567e3bf2b062c4f2a4d324d2e8f88a64bd719109f0d9786ac08dc905252a817853aee6c37dd76182cc58a5588624dfe215b1950446221fda4b6c19834f
-
SSDEEP
12288:YaazV2H1ECVThO3UVz6Mj4ZfEDKiJF3Z4mxxfDqVTVOCqC:+JGyMpj4ZfGJQmXeVTzqC
Malware Config
Signatures
-
resource yara_rule behavioral2/files/0x0008000000023337-11.dat aspack_v212_v242 -
Loads dropped DLL 2 IoCs
pid Process 5056 b96ff0589a76eebeadc86d0729b3401c.exe 5056 b96ff0589a76eebeadc86d0729b3401c.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\MSINFO\atmQQ2.dll b96ff0589a76eebeadc86d0729b3401c.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5056 b96ff0589a76eebeadc86d0729b3401c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b96ff0589a76eebeadc86d0729b3401c.exe"C:\Users\Admin\AppData\Local\Temp\b96ff0589a76eebeadc86d0729b3401c.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
PID:5056
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4116 --field-trial-handle=3112,i,1786399861560734457,5606877702857066305,262144 --variations-seed-version /prefetch:81⤵PID:1440
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344KB
MD57724819f75e430ed8c0c884efa36f2ae
SHA196c7fcbead9106626da0de8a78d6ac49b6699738
SHA256cc5bf7a311edbce872110f255ab6d9d914e1221888382d981fa6c92f90c96d97
SHA5122ec999a318e772726292119177da24cc6e82bdeb140b93a0d763b2d32ac40a1d9f4c4ff750719d5cc463424e27d88762bd1ff145280dc70597add0d8f4446e9d