Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16-03-2024 12:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ce08bd7c1d9acdf6c73952e067fbab81.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ce08bd7c1d9acdf6c73952e067fbab81.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
ce08bd7c1d9acdf6c73952e067fbab81.exe
-
Size
31KB
-
MD5
ce08bd7c1d9acdf6c73952e067fbab81
-
SHA1
2e42e3fc02098e5f70a6f7fef32a72455f4ba8b2
-
SHA256
2868a60a4703503b2ca08d6323a216517beb551d752fc8b93475593ae9b22be8
-
SHA512
b8398d2086601095c8fff6b4cad78e34744b9b2499b995376886fc70853e0656d7bccfc09b88f99d0183688ec2bc2d4d4a1d0c842a15b7020b3d8d54af19117c
-
SSDEEP
768:zI/fXOhlKoLxtCt74y/842kGim5admgS0CX0Mdt:ICKoLD+h/84UimkdxMr
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2184 wrote to memory of 3240 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe 54 PID 2184 wrote to memory of 3240 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe 54 PID 2184 wrote to memory of 3240 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe 54 PID 2184 wrote to memory of 3240 2184 ce08bd7c1d9acdf6c73952e067fbab81.exe 54
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:3240
-
C:\Users\Admin\AppData\Local\Temp\ce08bd7c1d9acdf6c73952e067fbab81.exe"C:\Users\Admin\AppData\Local\Temp\ce08bd7c1d9acdf6c73952e067fbab81.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2184
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3488 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:81⤵PID:5064