Analysis
- max time kernel
128s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
14/03/2024, 19:54
Behavioral task
behavioral1
Sample
c97bebedd7c1eb728f8ca2c6e7d38520.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c97bebedd7c1eb728f8ca2c6e7d38520.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target c97bebedd7c1eb728f8ca2c6e7d38520.exe
- Size 34KB
- Sample240314-ymjaqadd91
- SHA256 64792329918092f5267ff9b7f90c77a372eea234d78a88c989838e766467b296
- MD5 c97bebedd7c1eb728f8ca2c6e7d38520
- SHA1 a6c0ba9c5e2c35819941f0b57fdb27b7aaf062aa
- SHA512 d3d26b6148c8860ba7ce1190712988ecfe6a937be1196c293668bb1eddcb64f052f7986b1634b2493969a893ca29c0224181c0b8510017d36930f373714aab18
- SSDEEP 768:mm2d1lZmpy9084X6U5wkdWXnhxJdeVXuJK:mm2dPZ8y9081U5wOepJK
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\imgst.scr c97bebedd7c1eb728f8ca2c6e7d38520.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c97bebedd7c1eb728f8ca2c6e7d38520.exe"C:\Users\Admin\AppData\Local\Temp\c97bebedd7c1eb728f8ca2c6e7d38520.exe"1⤵
- Drops file in System32 directory
PID:3384
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4132 --field-trial-handle=2264,i,13734085038406049477,12426093271221802693,262144 --variations-seed-version /prefetch:81⤵PID:4332
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\imgst.scr
- Size 151KB
- SHA256 05bfd05ba70b45a7179045511392b773fc909b91fd856ce1bfb4c7a5e5e77c56
- MD5 b96a6e676b43ca91cfd05245ae792e97
- SHA1 e4b0e7c5e05ba1d19233afb1e52b74607c4b1bb2
- SHA512 6f3fa471dac3db1ab772aa96814a65b93948228d41dff5f2f77fca2451c3c2c422f159b5e03fbecb3ffcbf3828d1cb9061239e65179137895c078c6e39258d9b
- SSDEEP 3072:0uKi1jCOQpHs9yVRbk683OWaVlEM1bql3dk5Bz:0uKi8bNql3dk5Bz
- MD5 SHA1 SHA512 SSDEEP