44c4cb8e1171e0a9a009c986663c5af8adf841cfd5e03c52a5260d4f8a3a9021

Analysis

max time kernel
141s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/03/2024, 11:07

Target

c06f6f707173c1b876fac73ba597ae9d.exe
Size

1.0MB
MD5

c06f6f707173c1b876fac73ba597ae9d
SHA1

02293991c417d218efedcb00cd3e0b19a2d2af76
SHA256

44c4cb8e1171e0a9a009c986663c5af8adf841cfd5e03c52a5260d4f8a3a9021
SHA512

bf4f7566d9efc4fe1e65db8d2f45a1f1996b5a304339ccc9e9948180a4b6dccb22883afbc5206b96d52fb2d4872a066c756cf6a9ff61b9505b22ecadd3207bca
SSDEEP

24576:OZw/u0A9RffFNfYloAzA+wH2FCVKdvpU03yF9zoxTZy4A447qV0ox:OeYFFGciYsu0CFVeTZbA4b

Score

5^/10

Drops file in System32 directory 6 IoCs

description	ioc	Process
File created	C:\windows\SysWOW64\listliam.exe	c06f6f707173c1b876fac73ba597ae9d.exe
File opened for modification	C:\windows\SysWOW64\listliam.exe	c06f6f707173c1b876fac73ba597ae9d.exe
File created	C:\windows\SysWOW64\Controller.dll	c06f6f707173c1b876fac73ba597ae9d.exe
File opened for modification	C:\windows\SysWOW64\Controller.dll	c06f6f707173c1b876fac73ba597ae9d.exe
File created	C:\windows\SysWOW64\install.bat	c06f6f707173c1b876fac73ba597ae9d.exe
File opened for modification	C:\windows\SysWOW64\install.bat	c06f6f707173c1b876fac73ba597ae9d.exe

C:\Users\Admin\AppData\Local\Temp\c06f6f707173c1b876fac73ba597ae9d.exe
"C:\Users\Admin\AppData\Local\Temp\c06f6f707173c1b876fac73ba597ae9d.exe"
1⤵
- Drops file in System32 directory
PID:3212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4036 --field-trial-handle=2248,i,10247514684337323751,15511974759131734137,262144 --variations-seed-version /prefetch:8
1⤵
PID:1092

memory/3212-6-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download