Analysis

  • max time kernel
    93s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 18:30

General

  • Target

    d4b59b9c37a99716aec9434b63d3780c.hta

  • Size

    49KB

  • MD5

    d4b59b9c37a99716aec9434b63d3780c

  • SHA1

    b66a0d184d6019451fd6e4bf57cc6a5e420d374f

  • SHA256

    93a6b68e7e77c7055ae2ff1d2e3b093cd09bdc6e1f7c04097ad840a44c2957bc

  • SHA512

    4aa4f17913d847fb3f6a9968b4487f8c67ad7cd1b5f09d8655dcae1a61634ab472c8f8ef5f4a337b06a84cbeeda91ba60ea1f45b1fe13013bdf57feb6e68db55

  • SSDEEP

    768:Lf5ZvD7lYRnPI2GYXV3RU3zENsvMI8hgpIooo7VVVV91dOF:Lf5h7liPI2V3RU3z5v18hgpIFUdOF

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 4 IoCs

Processes

  • C:\Windows\SysWOW64\mshta.exe
    C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\d4b59b9c37a99716aec9434b63d3780c.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
    1⤵
    • Blocklisted process makes network request
    PID:1160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Strngncryptr-rad74578.tmp\icon.ico
    Filesize

    2KB

    MD5

    da87b764ec8d77105e5da2594fde6ce0

    SHA1

    d70f6a0ce23de956fc779f9af412c7a9b6a66e35

    SHA256

    e150ea4e8cc61cffaa6b19772dbc811406141a9a84da43cd60ee8bea89977414

    SHA512

    77d3ddd56c8d7774d557d57a312166255295aa3909c1ac8aae801e20c21d03f1fa675f4915d2c9dbeae709dd97a0e6676228d22cb7b4c8c01e9b1be13122591a