cca9f80771b76ceb60f721821731af9d00e5b417ce869476d360eed8ddcf9db2 | Triage

Analysis

max time kernel
155s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 00:30

Sharing

Report Analysis Logs

General

Target

ca071d3b73fc10882245a93abb8afa9c.exe
Size

20KB
MD5

ca071d3b73fc10882245a93abb8afa9c
SHA1

d1a994029b69515bcfb9a9514af2b3ee519b2034
SHA256

cca9f80771b76ceb60f721821731af9d00e5b417ce869476d360eed8ddcf9db2
SHA512

e0b6fd87cb60d7b0da2a6b886d8bd958f16fd77b21257c28fc110d5d2d0a2bf574a7503ee74f5f5e83e55234af81836234f1cf8880939b5d5a42b8c8d3ad78a0
SSDEEP

192:nKcPPEuMj7oQz71ZN1f7keLWW7F1oyn9zmRs3eXeNMD1:KIhQb/d1jzmRsOXeNM

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4392	ca071d3b73fc10882245a93abb8afa9c.exe
4392	ca071d3b73fc10882245a93abb8afa9c.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4392 wrote to memory of 4176	4392	ca071d3b73fc10882245a93abb8afa9c.exe	97
PID 4392 wrote to memory of 4176	4392	ca071d3b73fc10882245a93abb8afa9c.exe	97
PID 4392 wrote to memory of 4176	4392	ca071d3b73fc10882245a93abb8afa9c.exe	97

C:\Users\Admin\AppData\Local\Temp\ca071d3b73fc10882245a93abb8afa9c.exe
"C:\Users\Admin\AppData\Local\Temp\ca071d3b73fc10882245a93abb8afa9c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4392
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c \DelMe.bat
  2⤵
  PID:4176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4032 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:8
1⤵
PID:2472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\DelMe.bat

Filesize
340B

MD5
ca44578795c213b88b545ab7e80b0ed5

SHA1
cbcbe0d794e7d97845e02e2390c33686060fad82

SHA256
053e94844e1f57ca8cded2f1057be9ba3731d628c5b9693635452334b7198bed

SHA512
0a5ccc043ce9304129dafa97c8e3d7ff9b4d000e21859225395101a50963ae25a776f1ac47f5df803a235e555fd0ed3e0d9cd001ab473a1775ec4396d43b60b0

Download Submit