Analysis
- max time kernel
152s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 10:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ade4f437.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ade4f437.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target ade4f437.exe
- Size 9.9MB
- Sample240613-mjdqaayfll
- SHA256 61644d571470050d747c81350fcb6cc181f7b7e8d27377d8df3661bdf8a4664c
- MD5 b6a77e293a158f046f39ab50f276ef9f
- SHA1 11fd49c23a1f056c1ab685efe3adbb8d356ec8d4
- SHA512 eb29c779d5094e8c4606f598fbe3aa15810c7469aeea894c0731d196a1e75b5e4ecb856ba05337bcd4732baa849e6c08bd0dc9240e3cdeb5a7fc9dd831726906
- SSDEEP 98304:Yey3/1CE8rza+nvC9tMxWPw9IvKGLz1bF+eml42ltsvpOnhQrjk1K/UB+XeVSnYw:1w1cagWPKu1bol/n7hD1x6cwYd9y
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Contacts a large (765) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Downloads MZ/PE file
- GoLang User-Agent 64 IoCs
Uses default user-agent string defined by GoLang HTTP packages.
description flow ioc HTTP User-Agent header 1343 Go-http-client/1.1 HTTP User-Agent header 1386 Go-http-client/1.1 HTTP User-Agent header 82 Go-http-client/1.1 HTTP User-Agent header 598 Go-http-client/1.1 HTTP User-Agent header 711 Go-http-client/1.1 HTTP User-Agent header 746 Go-http-client/1.1 HTTP User-Agent header 988 Go-http-client/1.1 HTTP User-Agent header 1056 Go-http-client/1.1 HTTP User-Agent header 1327 Go-http-client/1.1 HTTP User-Agent header 1825 Go-http-client/1.1 HTTP User-Agent header 39 Go-http-client/1.1 HTTP User-Agent header 968 Go-http-client/1.1 HTTP User-Agent header 834 Go-http-client/1.1 HTTP User-Agent header 1280 Go-http-client/1.1 HTTP User-Agent header 1293 Go-http-client/1.1 HTTP User-Agent header 1452 Go-http-client/1.1 HTTP User-Agent header 1745 Go-http-client/1.1 HTTP User-Agent header 1796 Go-http-client/1.1 HTTP User-Agent header 915 Go-http-client/1.1 HTTP User-Agent header 1251 Go-http-client/1.1 HTTP User-Agent header 1270 Go-http-client/1.1 HTTP User-Agent header 1352 Go-http-client/1.1 HTTP User-Agent header 1519 Go-http-client/1.1 HTTP User-Agent header 193 Go-http-client/1.1 HTTP User-Agent header 1406 Go-http-client/1.1 HTTP User-Agent header 597 Go-http-client/1.1 HTTP User-Agent header 1078 Go-http-client/1.1 HTTP User-Agent header 1152 Go-http-client/1.1 HTTP User-Agent header 1565 Go-http-client/1.1 HTTP User-Agent header 1798 Go-http-client/1.1 HTTP User-Agent header 781 Go-http-client/1.1 HTTP User-Agent header 1046 Go-http-client/1.1 HTTP User-Agent header 293 Go-http-client/1.1 HTTP User-Agent header 1075 Go-http-client/1.1 HTTP User-Agent header 1083 Go-http-client/1.1 HTTP User-Agent header 1342 Go-http-client/1.1 HTTP User-Agent header 1698 Go-http-client/1.1 HTTP User-Agent header 1700 Go-http-client/1.1 HTTP User-Agent header 172 Go-http-client/1.1 HTTP User-Agent header 325 Go-http-client/1.1 HTTP User-Agent header 370 Go-http-client/1.1 HTTP User-Agent header 559 Go-http-client/1.1 HTTP User-Agent header 1322 Go-http-client/1.1 HTTP User-Agent header 1457 Go-http-client/1.1 HTTP User-Agent header 1683 Go-http-client/1.1 HTTP User-Agent header 4 Go-http-client/1.1 HTTP User-Agent header 442 Go-http-client/1.1 HTTP User-Agent header 649 Go-http-client/1.1 HTTP User-Agent header 1226 Go-http-client/1.1 HTTP User-Agent header 1444 Go-http-client/1.1 HTTP User-Agent header 1079 Go-http-client/1.1 HTTP User-Agent header 1328 Go-http-client/1.1 HTTP User-Agent header 1651 Go-http-client/1.1 HTTP User-Agent header 1704 Go-http-client/1.1 HTTP User-Agent header 1195 Go-http-client/1.1 HTTP User-Agent header 1229 Go-http-client/1.1 HTTP User-Agent header 1558 Go-http-client/1.1 HTTP User-Agent header 1691 Go-http-client/1.1 HTTP User-Agent header 1261 Go-http-client/1.1 HTTP User-Agent header 45 Go-http-client/1.1 HTTP User-Agent header 205 Go-http-client/1.1 HTTP User-Agent header 354 Go-http-client/1.1 HTTP User-Agent header 982 Go-http-client/1.1 HTTP User-Agent header 1006 Go-http-client/1.1
Processes
-
C:\Users\Admin\AppData\Local\Temp\ade4f437.exe"C:\Users\Admin\AppData\Local\Temp\ade4f437.exe"1⤵PID:4900
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1312 --field-trial-handle=2284,i,9807419199535700662,2319175108930815708,262144 --variations-seed-version /prefetch:81⤵PID:3644