Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10-06-2024 00:30
Behavioral task
behavioral1
Sample
90bf3f854c210f30e0b57b78330e62c611d00a444c904bb792c56e426a9e2671.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
90bf3f854c210f30e0b57b78330e62c611d00a444c904bb792c56e426a9e2671.dll
Resource
win10v2004-20240226-en
General
-
Target
90bf3f854c210f30e0b57b78330e62c611d00a444c904bb792c56e426a9e2671.dll
-
Size
14KB
-
MD5
e01a2a1ce242aeb322285599f4a6d9cd
-
SHA1
01590521f41068f6de633a63ff65cd57649bc626
-
SHA256
90bf3f854c210f30e0b57b78330e62c611d00a444c904bb792c56e426a9e2671
-
SHA512
e6892a3540b843ee4a15f03b53ac7a58dcd1b7975ecdba7074a118cc6cbc547966b65127fb64e57a46c30fc4c7300eb6f619352129efeff39c7df8d8bfdaa311
-
SSDEEP
192:XpRFqHj1l7I31LlgIiU7NKhJD8lKZ1EpNnumJi+4RhgykkK+ssV+8NqY:vFqHj1+c9U7ghqVTJiEussVZq
Malware Config
Signatures
-
Blocklisted process makes network request 1 IoCs
Processes:
rundll32.exeflow pid process 15 3580 rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\90bf3f854c210f30e0b57b78330e62c611d00a444c904bb792c56e426a9e2671.dll,#11⤵
- Blocklisted process makes network request
PID:3580
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1348 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:81⤵PID:1584