Analysis

  • max time kernel
    149s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-03-2024 21:16

General

  • Target

    4efb93d28608343aae86e59157f1d08797b9332aa90330a44d33e0a678ff60ea.exe

  • Size

    3.2MB

  • MD5

    aebc390b209aa94c5fb82767dba94918

  • SHA1

    9d864ae70e8d4417760fbc57b42cb99b6c11d2bb

  • SHA256

    4efb93d28608343aae86e59157f1d08797b9332aa90330a44d33e0a678ff60ea

  • SHA512

    24f9f0c42a8974b62eefb41531c8663f8f72a5032b29ae657ce0e845e667d8fb9703a82e6d081d9465a5bffba0efcf3839a7d1ff29e9edb7c9959cd20e1627bc

  • SSDEEP

    98304:qg5/ZuVx819F5s8guthvylWXOLGHdHHHHHHqUPh:x5/ZuVx81/yvutdylWXcGHwUp

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4efb93d28608343aae86e59157f1d08797b9332aa90330a44d33e0a678ff60ea.exe
    "C:\Users\Admin\AppData\Local\Temp\4efb93d28608343aae86e59157f1d08797b9332aa90330a44d33e0a678ff60ea.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3928
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1712 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:4256

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\{1502E58E-F7C6-4bef-954B-BECE78159B42}\config.xml

      Filesize

      399B

      MD5

      3b06bc4d3531d8622ec8cab8e0dd6589

      SHA1

      f52a3557ef2e8cb1d237ebb4eae65f641de5aa20

      SHA256

      ca4099f27b9c6bd9426a7d7402f6fb88e2717fe43a55cc4c2b4e2a48aa8d6b74

      SHA512

      0922bdf4624eb9a95bb9da1d1b492c1261c908629f2d7ca477e36874d7b8cbbf233946bf85030b8ec2ea436d3e08764e819dd41c2f54a464a7737d6da112e045

    • C:\Users\Admin\AppData\Local\Temp\{1502E58E-F7C6-4bef-954B-BECE78159B42}\filelist.xml

      Filesize

      1KB

      MD5

      98b2ee7bdbaf920edb29d890311dc05a

      SHA1

      ec8c4caa0180e287e69bc18cdb3f5e1ce74e5f6d

      SHA256

      33b8379a47b1b354acdd8ae105197fca636895b202785b24a19b532a1d7ad59d

      SHA512

      9fd5ac46907dd9cdf755ba63e29e83ef276f8274aee53e8135986acffe2083bd72bad09e1892886a09e7f171336c3e3c39f628967264fd9a69c2837d909268cc