Analysis
- max time kernel
132s - max time network
128s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
30/05/2024, 01:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc.exe
- Size 162KB
- Sample240530-cdnyysbd67
- SHA256 b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc
- MD5 ea36b4d878de29f935d6a6bfe572751d
- SHA1 499d45d103f3986a57daed8b0008a9675ff867e5
- SHA512 efa0c99f20d31e39bd2812d659c73e030b54bbfab8e2176e7a15fad0a5523de6298e0a8c9cb61f331e12aacb96c29b5ea7afcc2605077960a7b97688d0364f06
- SSDEEP 3072:n4d5Eow66zVJaolwYG0/xZJAV9DoRBbGyI3R6gNtE1ajncge:4dv6zKYO9URxjI3Ucng
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookAW 1 IoCs
pid Process 4800 b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc.exe"C:\Users\Admin\AppData\Local\Temp\b440714271e85449200021ffedc45711a8239fc9cdc3dab8904f4e5797880efc.exe"1⤵
- Suspicious use of SetWindowsHookAW
PID:4800
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3452,i,16710585221322798697,8586257254049248207,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:81⤵PID:1956