Analysis
-
max time kernel
150s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/03/2024, 22:50
Static task
static1
Behavioral task
behavioral1
Sample
c1ce74d84f5420794a21aa808b5e07c6.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c1ce74d84f5420794a21aa808b5e07c6.exe
Resource
win10v2004-20240226-en
General
-
Target
c1ce74d84f5420794a21aa808b5e07c6.exe
-
Size
2.9MB
-
MD5
c1ce74d84f5420794a21aa808b5e07c6
-
SHA1
be2fd354ccbc155c5f414bd3bb72e9f815cee99c
-
SHA256
638ea821d4de94c3d9497d72770579528fa26869fbda323be028db2ccd58a0dd
-
SHA512
3184c938316d867920e3ebbebb80fb46ef53c05eca6882a7c5a65ea09151db25c0df455ed47feac4fc8d6d446b2baac5dde2dba4ad8d381ff50c3b8c7fb8b4b5
-
SSDEEP
49152:7J0x0Oj7iK5gAeutjd+yC2DQ+8+RCIvBd/0clZVXYBrQDwoxkQex8Iht+spfB83y:Vc5Tl3nfQ5Iv3/5lZyBfo6t+spfr
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\SetupBoostrapper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\c1ce74d84f5420794a21aa808b5e07c6.exe" c1ce74d84f5420794a21aa808b5e07c6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c1ce74d84f5420794a21aa808b5e07c6.exe"C:\Users\Admin\AppData\Local\Temp\c1ce74d84f5420794a21aa808b5e07c6.exe"1⤵
- Adds Run key to start application
PID:3484
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3688 --field-trial-handle=2276,i,11674642242468042059,14711253743544118298,262144 --variations-seed-version /prefetch:81⤵PID:4768
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
177B
MD51bad6cfb91961d213899ce2ad1258782
SHA1e8494568e654a95868ccd5a516464d3a45004c2b
SHA2566155f50c6c45f2f37749645b82a0a4ff290364f721a6f70441a207e7cb39c8ed
SHA51248f9a3687e4f856ac481348b3c33b1173958f1b6b9a19ca1def79c36c7e52666e5858a58b25d97321ea753ba7332145f27d551316e6cb61db85cbb6d199028b9