Analysis
-
max time kernel
149s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08-03-2024 21:23
Static task
static1
Behavioral task
behavioral1
Sample
d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.exe
Resource
win10v2004-20240226-en
General
-
Target
d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.exe
-
Size
690KB
-
MD5
2ddb3e22b14186bd6c7719c86f55e7f5
-
SHA1
6dc4e3c317ffef33f35127fafa2d427dfcddd1a2
-
SHA256
d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904
-
SHA512
7ba043bb0948b5fd86b16083836475bd761df48ceafe5c3acf06ded6692dcdbe6705754746d92645e4745d20ed68991721fe41626c7984babddc199cd6679f62
-
SSDEEP
12288:tZ3a9wgX3uopW2sE1pUoKJr88itdG09ape:q99X3/plR1pU1Jr88itY1pe
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1904 d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.exe 1904 d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.exe"C:\Users\Admin\AppData\Local\Temp\d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1904
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4204 --field-trial-handle=2700,i,14629483171127516024,12350888228055326066,262144 --variations-seed-version /prefetch:81⤵PID:64
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\d6571cf1265dd3cb8e2b0423093b5d5d0c7631ea42797d639b07a22c7b325904.ini
Filesize65B
MD521f1095279e170b820c35afb428e3716
SHA1c0b8061d12fc03131ccd163b3a8efda525f56275
SHA25620495311dd3fe12dd93872d5cb566655dbd7cda18fc50b839110f31c257974bc
SHA51277dc2eb089411dca3031497ae486a871216e9e04f40aaa108409ff3e84452020f6c0d40ed35625a04c8adfc8b163dac1a70eeb65a851c7018c10919176b0bc72