Analysis

  • max time kernel
    148s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2024, 19:21

General

  • Target

    d6eb7ccd86803ae24a341aaaf5802f44.exe

  • Size

    225KB

  • MD5

    d6eb7ccd86803ae24a341aaaf5802f44

  • SHA1

    332953fafac16a73e621291910af25175d200e26

  • SHA256

    109794f84046577d36706f0216d8861f9717db0ac4af5d89b0764255ee4632f0

  • SHA512

    3936696f47fe146818e8090b8f969045ed62e9e4fe8b73ad836df0a594d2b2ec1c5d6d7915ac0f1db077da9327f1771e3c953391fb502ee636da658e4cc7413d

  • SSDEEP

    3072:jfDH1eqz1bZ11/OSYQezSMbq7j3LkeHrFnvQKKnvxOY7c/3rVQs+Px/:jZZdb1a1+33AqFIKKZOSc/b2s+Px

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d6eb7ccd86803ae24a341aaaf5802f44.exe
    "C:\Users\Admin\AppData\Local\Temp\d6eb7ccd86803ae24a341aaaf5802f44.exe"
    1⤵
    • Drops file in Windows directory
    PID:532
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1400 --field-trial-handle=2432,i,12161922670941700748,3348345705955601576,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:3104

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/532-0-0x0000000000180000-0x0000000000181000-memory.dmp

      Filesize

      4KB

    • memory/532-1-0x0000000000190000-0x0000000000191000-memory.dmp

      Filesize

      4KB

    • memory/532-3-0x00000000001C0000-0x00000000001C1000-memory.dmp

      Filesize

      4KB

    • memory/532-4-0x00000000001D0000-0x00000000001D1000-memory.dmp

      Filesize

      4KB

    • memory/532-2-0x00000000001A0000-0x00000000001A1000-memory.dmp

      Filesize

      4KB

    • memory/532-5-0x00000000001E0000-0x0000000000200000-memory.dmp

      Filesize

      128KB

    • memory/532-6-0x0000000000AB0000-0x0000000000ADF000-memory.dmp

      Filesize

      188KB

    • memory/532-10-0x00000000001E0000-0x0000000000200000-memory.dmp

      Filesize

      128KB

    • memory/532-18-0x00000000001E0000-0x0000000000200000-memory.dmp

      Filesize

      128KB