Overview

overview

3

Static

static

3

02-77401-7...ID.exe

windows7-x64

1

02-77401-7...ID.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 22:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    02-77401-74937-3392-ID.exe

  • Size

    639KB

  • MD5

    c0badc85f7aad8bb618194a0c17ec279

  • SHA1

    3af5b17d67f144ce9d1af2a718ea405af44d689a

  • SHA256

    2bcceadfe3ae3b1aba0c6998b5c5f8cdc811df8d048865d4458b5e384cdb128e

  • SHA512

    606d1ec144225a5b6e6fa96cf1d7f493cec644b19a8bc4b6716ce36323b60c6c16d92cc6395985f7f8883ae4e4ce040f068aa35023274d6e82a68dda7f3aba72

  • SSDEEP

    12288:ow5jalVUuAOpM6qDy9CSl7bsfZTjaI/WQTT9U3W0/Fg0oDmfd0FNgI0bx:owEppqD2BY4mNDmfUf0

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\02-77401-74937-3392-ID.exe
    "C:\Users\Admin\AppData\Local\Temp\02-77401-74937-3392-ID.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    PID:812
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3616 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:1312

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/812-0-0x00000000006D0000-0x00000000006D1000-memory.dmp

            Filesize

            4KB

            Download

          • memory/812-1-0x0000000000400000-0x00000000004A2000-memory.dmp

            Filesize

            648KB

            Download

          • memory/812-3-0x0000000000401000-0x000000000049D000-memory.dmp

            Filesize

            624KB

            Download

          • memory/812-2-0x00000000006B0000-0x00000000006B1000-memory.dmp

            Filesize

            4KB

            Download

          • memory/812-4-0x0000000000400000-0x00000000004A2000-memory.dmp

            Filesize

            648KB

            Download

          • memory/812-5-0x0000000000401000-0x000000000049D000-memory.dmp

            Filesize

            624KB

            Download