Overview
overview
10Static
static
1Data2.zip
windows7-x64
1Data2.zip
windows10-2004-x64
1hv.exe
windows7-x64
5hv.exe
windows10-2004-x64
10iepdf32.dll
windows7-x64
3iepdf32.dll
windows10-2004-x64
3rhombohedron.ai
windows7-x64
3rhombohedron.ai
windows10-2004-x64
3shovelnose.deb
windows7-x64
3shovelnose.deb
windows10-2004-x64
3Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
12-06-2024 06:44
Static task
static1
Behavioral task
behavioral1
Sample
Data2.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Data2.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
hv.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
hv.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
iepdf32.dll
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
iepdf32.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
rhombohedron.ai
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
rhombohedron.ai
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
shovelnose.deb
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
shovelnose.deb
Resource
win10v2004-20240508-en
General
-
Target
Data2.zip
-
Size
7.0MB
-
MD5
665d5cb8bf03ea4637f8a1eb891237cc
-
SHA1
4d290fd2e61cc68d77511ca7dd31671b019c795b
-
SHA256
ca2b787bb72f0bd9d79013aa93800bfd84c73aad74662c48e69425e4adfb549b
-
SHA512
f4ac9d244f829db32a100d3f7728989120506972df79ac1b9f4996aa7ce68b04a1939aa54702b8b9b36469301b4cd6386871be1ab79d7a1528f4da251899f900
-
SSDEEP
196608:P5BbYhk9QG+Obzpmg96OMh+v31oYOhevg:PnUhNtid996OPoYOqg
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Data2.zip1⤵PID:3680
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4036,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:81⤵PID:3224