Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
02-05-2024 02:46
Static task
static1
Behavioral task
behavioral1
Sample
b781e9079f244e4fc1d4a55740f3bbc3472d7a002e799871a76ffb5f4568f3b0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b781e9079f244e4fc1d4a55740f3bbc3472d7a002e799871a76ffb5f4568f3b0.exe
Resource
win10v2004-20240226-en
General
-
Target
b781e9079f244e4fc1d4a55740f3bbc3472d7a002e799871a76ffb5f4568f3b0.exe
-
Size
3.8MB
-
MD5
19b2652e5b12291a4c8dfcd1afda06fc
-
SHA1
cd33dee75825d3b5e4f420912d11522f1cc80353
-
SHA256
b781e9079f244e4fc1d4a55740f3bbc3472d7a002e799871a76ffb5f4568f3b0
-
SHA512
de7ba132d804fa9277ed01ed5bc2712e720ab39c9a1980086a339d60c3c25c9fe6d133e4cc8259b8b0b220c2331c8564cb6e8b4dbb9e9f27fd7d01b72b018c98
-
SSDEEP
98304:M2Ut7/0OSRS6Sh79+bTI2UXR33UjfoXYyjdykYKCMN/+1A:VUtLT8S6C9+XyXqUXYyRvCMNG1A
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\b781e9079f244e4fc1d4a55740f3bbc3472d7a002e799871a76ffb5f4568f3b0.exe"C:\Users\Admin\AppData\Local\Temp\b781e9079f244e4fc1d4a55740f3bbc3472d7a002e799871a76ffb5f4568f3b0.exe"1⤵PID:452
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3636 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:81⤵PID:1572