Analysis
- max time kernel
153s - max time network
163s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
08/03/2024, 21:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target 9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3.exe
- Size 507KB
- Sample240308-1cc23ahc81
- SHA256 9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3
- MD5 363625d617c2509228600da92bbfc910
- SHA1 265d01f8bf0ab10d5340c65d52c95c915727e79f
- SHA512 2b306eba2b9c06b89ea1af37ee066d59b0f8d5def40d32afe4e82e98c0e0b4e8ee98d1536d2919f0a3aecbed8f09da095fec43bda44756179fcea05efb50a4a4
- SSDEEP 12288:SjHyB6UCgI+w9xGVpTskWYgeWYg955/155/JSQ7ki1InInRC:SjH7CIjaVpTsbSQ7
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5020 9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3.exe 5020 9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3.exe"C:\Users\Admin\AppData\Local\Temp\9defdafe2234b307914eb7f5296b9b223da6b6b585656a6f68ad00c57aee00e3.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:5020
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=2700,i,14629483171127516024,12350888228055326066,262144 --variations-seed-version /prefetch:81⤵PID:4396