Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
06/06/2024, 03:02
Static task
static1
Behavioral task
behavioral1
Sample
92c29522a6fae30753f0b3018e96847ce4dbcee52e4ebe50da678214bbb49213.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
92c29522a6fae30753f0b3018e96847ce4dbcee52e4ebe50da678214bbb49213.exe
Resource
win10v2004-20240226-en
General
-
Target
92c29522a6fae30753f0b3018e96847ce4dbcee52e4ebe50da678214bbb49213.exe
-
Size
184KB
-
MD5
40ce21aca21817d2743d7cb9dc6a3b86
-
SHA1
e1d6d580159da814ed8f2adc16d4f3161c8262cc
-
SHA256
92c29522a6fae30753f0b3018e96847ce4dbcee52e4ebe50da678214bbb49213
-
SHA512
91db6298ef8384f579dfce8f186851d987059e7787add4273161fe13fef14ca720a7b68f64edf1d991a81bf29b71ba89cf18178c00532a1a7e6b7d487b2f7842
-
SSDEEP
3072:inJkmDoR2WQUdj0NXEwhpdfGLvMqJviuy:invomQj0/hjfGLEqJviu
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1476 92c29522a6fae30753f0b3018e96847ce4dbcee52e4ebe50da678214bbb49213.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\92c29522a6fae30753f0b3018e96847ce4dbcee52e4ebe50da678214bbb49213.exe"C:\Users\Admin\AppData\Local\Temp\92c29522a6fae30753f0b3018e96847ce4dbcee52e4ebe50da678214bbb49213.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1476
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4068 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:81⤵PID:3584
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
MD582da3106ed09e93f5cd30bb3cf3f381e
SHA1f6f42f91df21a2806ea40a14de07026a62fb084e
SHA256e4793f0a89562a364d57d60759ae66629610a8f6d972ab73a26619cecbf15f10
SHA512ee962fc148636c46d6ce579b7cb31c50e72074a21762c47e467f0a8f8653ef8da94a7ba47eb3e35c73c1fed41d3c4f70fa2aa80d3566689d3b54f5afcc527012