4f64d1caed69ca071294176e6522aa94df8a82a8806a5f92c95a936a66519e09 | Triage

Analysis

max time kernel
143s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2024, 00:19

Sharing

Report Analysis Logs

General

Target

lz_dzz.exe
Size

1.0MB
MD5

9d7d3fc76b2e6f4cde400d2aa806402d
SHA1

bae9db48e73412b4c0340efdf319de58b4e22d00
SHA256

39860fe443233538a3f4fc029f0cc9e2475199970f49b3a9cfbf5a0ac9e9854b
SHA512

8b9691e7759b0b1537f200f2e3d254c894185c8c57d035227d69aa4184666159af7df62065a9c4e94b693cca6ff77ac3f4a745250d2b2239b940063d1d91c6d7
SSDEEP

24576:GU1oiQvzkP7AR9mm8br+yOeMXwFZbgPG88qXMu:p1odQP7ARv8bTOejZbO8Lu

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4844	lz_dzz.exe
4844	lz_dzz.exe

C:\Users\Admin\AppData\Local\Temp\lz_dzz.exe
"C:\Users\Admin\AppData\Local\Temp\lz_dzz.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4156 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:8
1⤵
PID:752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4844-3-0x00000000028D0000-0x00000000028D1000-memory.dmp

Filesize
4KB

Download
memory/4844-4-0x00000000028D0000-0x00000000028D1000-memory.dmp

Filesize
4KB

Download