Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/04/2024, 07:34

General

  • Target

    5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe

  • Size

    481KB

  • MD5

    fdd66dc414647b87aa1688610337133b

  • SHA1

    5ea302806c1156dce2edb8f4e4f18d852f9c3f53

  • SHA256

    5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa

  • SHA512

    4601249becc0462279571f97652cf706e3a9f9f16fc86c7e9739219db95cff6224e4eed70cf39a2ee8fd67730b498078d404e381faa234ffa0269dc2a5efbe66

  • SSDEEP

    12288:FRXxReZj3WZfj/2eSseWFaIe2+f8CL47bs/Zf2rkDU:Fx7cyF2eSsewS8W47eZOr

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe
    "C:\Users\Admin\AppData\Local\Temp\5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5064
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2212 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:4208

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\ProgramData\sintrbgh\logs.dat

            Filesize

            144B

            MD5

            9b4a4d87a9aa95d62135a959b366d877

            SHA1

            10198756e7d8c8e32bf4258470e0f1573f4e9693

            SHA256

            b7bc913f037b9e99e04f4e19a14c517e2a359d8c986534a407e39fe273da7e0d

            SHA512

            c49d09d6a825d14ec9dd836ae1aa05308076a2328a409fef8a6da9347e757289822139280fd2b8a8bd42cf51d87d7e5eeb5e571b590417aa354368a8176d489b