Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/04/2024, 07:34
Behavioral task
behavioral1
Sample
5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe
Resource
win10v2004-20240226-en
General
-
Target
5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe
-
Size
481KB
-
MD5
fdd66dc414647b87aa1688610337133b
-
SHA1
5ea302806c1156dce2edb8f4e4f18d852f9c3f53
-
SHA256
5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa
-
SHA512
4601249becc0462279571f97652cf706e3a9f9f16fc86c7e9739219db95cff6224e4eed70cf39a2ee8fd67730b498078d404e381faa234ffa0269dc2a5efbe66
-
SSDEEP
12288:FRXxReZj3WZfj/2eSseWFaIe2+f8CL47bs/Zf2rkDU:Fx7cyF2eSsewS8W47eZOr
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5064 5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe"C:\Users\Admin\AppData\Local\Temp\5b6bde7aecec278f551c365b93b79e8be123c5a1a5ff0ff254fb43225bc7abfa.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:5064
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2212 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:81⤵PID:4208
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144B
MD59b4a4d87a9aa95d62135a959b366d877
SHA110198756e7d8c8e32bf4258470e0f1573f4e9693
SHA256b7bc913f037b9e99e04f4e19a14c517e2a359d8c986534a407e39fe273da7e0d
SHA512c49d09d6a825d14ec9dd836ae1aa05308076a2328a409fef8a6da9347e757289822139280fd2b8a8bd42cf51d87d7e5eeb5e571b590417aa354368a8176d489b