Overview
overview
6Static
static
1Quarantine...es.zip
windows7-x64
1Quarantine...es.zip
windows10-2004-x64
1dd6a2f02-9...1c.eml
windows7-x64
5dd6a2f02-9...1c.eml
windows10-2004-x64
3attachment-2.eml
windows7-x64
5attachment-2.eml
windows10-2004-x64
3attachment-1.html
windows7-x64
1attachment-1.html
windows10-2004-x64
6email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Analysis
- max time kernel
239s - max time network
299s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
10/06/2024, 06:19
Static task
static1
Behavioral task
behavioral1
Sample
Quarantined Messages.zip
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Quarantined Messages.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
dd6a2f02-9285-4398-510a-08dc8704cc24/ae69a6ee-6604-e234-91a9-406715bf711c.eml
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
dd6a2f02-9285-4398-510a-08dc8704cc24/ae69a6ee-6604-e234-91a9-406715bf711c.eml
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
attachment-2.eml
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
attachment-2.eml
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
attachment-1.html
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
attachment-1.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win10v2004-20240508-en
General
- Target Quarantined Messages.zip
- Size 14KB
- Sample240610-g3ffbsdg73
- SHA256 967c79010413f26072acbd5e4fdfa0b65c8e72fb310986a24bb9939a2a86d02e
- MD5 68586bfa87f59c3f03162ca28fd0a796
- SHA1 7abdc90d9f475c25b94a87a3b96a87ba98fa977c
- SHA512 0788580233be36d426050de70f41a81d142221d3b8e8f96f08616c51843a7d409074a33af877f888acdff0b3969895d0560715ee7713703a78e910631ca7f533
- SSDEEP 384:RymMr+2nifWFMK+jXIz76IrL2YoN9CCrdAaHK/pQs:XMrrniOZMC6IraYojC6drqh
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Quarantined Messages.zip"1⤵PID:3108
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2824 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:81⤵PID:2448