2cadda88bd88792b1af7b862ecff967f4101ac6135cbeb176ee0512fb4c5193b | Triage

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240319-en
resource tags

arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
submitted
21-03-2024 15:41

Sharing

Report Analysis Logs

General

Target

DISCON~1.exe
Size

4.8MB
MD5

dec9b3f0f8752a09e8d02e6130547cbe
SHA1

b41822135f534f2469e8f9b0e758826739eb85f3
SHA256

dfad39a0d306b9a7659f2ebe9bdb25e376e38fdfd712e548e1b9f2c3561d8554
SHA512

efc9e289662f25b2a0ad5a24d5fd0ced645ae5512579f8b6a1509d3a31dbe784bd8cd53e25168a2b8d56a65429bee126df1a5f03fbbb6e3f51423d437e80ac25
SSDEEP

49152:pEy5qyKMQTgbT/AIk+n7/ruXHJoHhh9JyCLMyx46HFH:VQ83/AIk+7/SH8h4F6JH9

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

DISCON~1.exe

pid process

180 DISCON~1.exe

C:\Users\Admin\AppData\Local\Temp\DISCON~1.exe
"C:\Users\Admin\AppData\Local\Temp\DISCON~1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1044 --field-trial-handle=2276,i,5672504106535478802,17394903851940863593,262144 --variations-seed-version /prefetch:8
1⤵
PID:4528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/180-0-0x0000000000400000-0x00000000008D9000-memory.dmp

Filesize
4.8MB

Download
memory/180-3-0x0000000000400000-0x00000000008D9000-memory.dmp

Filesize
4.8MB

Download