14ed239174faea941c5607a9542a0c065865d47166ea8abfbfcfac6baca87ab5 | Triage

Analysis

max time kernel
143s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
16-04-2024 19:29

Sharing

Report Analysis Logs

General

Target

SchoolHackCoD5Multi.exe
Size

308KB
MD5

14d69654f7cf767e541c8e15bc50abd8
SHA1

8408797c802c2d8d08abc2a2da54b311e192a822
SHA256

42ba226407de5479677dc988dc8d627e6b8fff186c87b86f6c460636714b09fa
SHA512

887775254c25869c1c4388c468188d4df62b3a77baaaef67b3d07628bc2ee558010a271494eadf8acf0698e9700343e5cd852ebaa526e448c75a574f4d5817d1
SSDEEP

6144:kxyGRz+pGOBRUjqY6Xupa/Isp+MLEDBwzWuuUt+0gKaXC28:BGRz+pTB+W3/XdLlFf+0gKU

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
452	SchoolHackCoD5Multi.exe
452	SchoolHackCoD5Multi.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
452	SchoolHackCoD5Multi.exe
452	SchoolHackCoD5Multi.exe

C:\Users\Admin\AppData\Local\Temp\SchoolHackCoD5Multi.exe
"C:\Users\Admin\AppData\Local\Temp\SchoolHackCoD5Multi.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3836,i,7064649017625232947,17746804975634116675,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:8
1⤵
PID:4300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/452-0-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/452-1-0x00000000007C0000-0x00000000007C1000-memory.dmp

Filesize
4KB

Download
memory/452-2-0x0000000000400000-0x00000000004E8000-memory.dmp

Filesize
928KB

Download
memory/452-4-0x00000000007C0000-0x00000000007C1000-memory.dmp

Filesize
4KB

Download