Analysis

  • max time kernel
    147s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 01:01

General

  • Target

    ce6416059d72df767ccf87542d5637d89def1092c63e350fba9486f7ad3261a3.exe

  • Size

    19.0MB

  • MD5

    a53b4691bf7630efc2518e49f4b6791b

  • SHA1

    2d4961c3accc7117bcc44bcfe410a2778e437913

  • SHA256

    ce6416059d72df767ccf87542d5637d89def1092c63e350fba9486f7ad3261a3

  • SHA512

    a63874a15b740b06fa25cc50f745963ea6d414d26f9a33f9d1c3e44651b2986e35a4b3e5dd560e5822eb2cee7d7db63d16b976ed94d197e8b0c5b52ab223fba2

  • SSDEEP

    393216:FonAroFvmouguZh+iTrsXg6IyWqAci/gBBpJgGK9:FJkF+oKFswKztJDK

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ce6416059d72df767ccf87542d5637d89def1092c63e350fba9486f7ad3261a3.exe
    "C:\Users\Admin\AppData\Local\Temp\ce6416059d72df767ccf87542d5637d89def1092c63e350fba9486f7ad3261a3.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2144
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4032 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:2128

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Àϰ׸¨Öú\Àϰ׸¨ÖúÅäÖÃ.ini

      Filesize

      79B

      MD5

      4872847c3b38ac650b38ab626c671528

      SHA1

      16bb382db51c0573ed9d0a7ecbfa6846bdf5258b

      SHA256

      6a8526d2c6e44dd4630aeb32b0ff1894fd5f0be4359d6fd489c3813dc96616fc

      SHA512

      9ac69dd8c0e26ba927f92b90a9a180a68e7d50a49a451e81ddee95d5086d0f839e956131c0ca4f715618a37342bb5bcc6bfdd614ae6f9d75237bde329e6bef52

    • memory/2144-0-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-1-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-5-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-14-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-13-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-9-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-2-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-8-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-7-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-4-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-3-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-16-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-25-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-27-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-31-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-55-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-62-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-63-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-61-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-64-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-60-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-58-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-56-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-59-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-57-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-50-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-49-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-48-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-46-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-54-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-52-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-47-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-45-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-43-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-39-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-37-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-53-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-51-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-41-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-40-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-36-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-34-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-32-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-30-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-29-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-44-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-42-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-38-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-26-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-35-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-33-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-28-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-23-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-22-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-21-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-20-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-19-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-18-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-24-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-17-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-15-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-12-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-11-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-10-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-6-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-834-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-838-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB

    • memory/2144-839-0x0000000003570000-0x0000000003C7D000-memory.dmp

      Filesize

      7.1MB