Analysis
-
max time kernel
135s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
26-05-2024 06:01
General
-
Target
89dc1376dc9e78f760389a28b40075d4d593cf5508ff29634eb6b4b292aae74d.exe
-
Size
9.3MB
-
MD5
0958d8ee14e1616a758f67147d416d9d
-
SHA1
d4b0bcde8162c8beb94a9972f2a6be1d4c004c36
-
SHA256
89dc1376dc9e78f760389a28b40075d4d593cf5508ff29634eb6b4b292aae74d
-
SHA512
bb0055b72c67b0ec5a88f547149badd862301a68121040bf3c096f2075b788acf96bde19d6970c0fb8ad218e32afaf8b14213f62d705df349de31d5822ea08f4
-
SSDEEP
196608:OfQPp6th6U2TdPE0s9akhY1i74qiK7l7BAE1QBaumTxUc8YVd40:OoRnyn9NF74qTbl1Qm9KYL
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 6 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\89dc1376dc9e78f760389a28b40075d4d593cf5508ff29634eb6b4b292aae74d.exe"C:\Users\Admin\AppData\Local\Temp\89dc1376dc9e78f760389a28b40075d4d593cf5508ff29634eb6b4b292aae74d.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4460,i,2607710392823067546,4648797561512801463,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
19.1MB
-
Filesize
1.7MB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
19.1MB
-
Filesize
19.1MB
-
Filesize
1.7MB