Analysis
- max time kernel
91s - max time network
100s - platform
windows11-21h2_x64 - resource
win11-20240611-en - resource tags
arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system - submitted
16/06/2024, 01:32
Behavioral task
behavioral1
Sample
ExLoadFree_4.22.exe
Resource
win10v2004-20240611-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ExLoadFree_4.22.exe
Resource
win11-20240611-en
2 signatures
150 seconds
General
- Target ExLoadFree_4.22.exe
- Size 5.6MB
- Sample240616-bx5kdatfjg
- SHA256 406263a0917c098ab88eae26fdd190ccaa917bdf58042fcf5116d59500d4656e
- MD5 8ebf648a2038f89a58329d25ea1d3cee
- SHA1 0ab911427813117a7516d3f082f069462bf66510
- SHA512 41c7d1c6090dffafe49e58a50a8cb215094abbb6ffbecf4a2f0ff1385c41dd182039e1a1878c0b6b4d0794814e008a70c5a91e22e4e14aceeaca3ae60d81a875
- SSDEEP 98304:1Y+MySxznf6mreKV/IkvY712+KCUtENwgtuThwPcSwRiT02hioLRWSZCbYvgA3Ys:1r8xzim1ukA712DCUWOThwPcSai4+AQP
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-423582142-4191893794-1888535462-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1800 MiniSearchHost.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ExLoadFree_4.22.exe"C:\Users\Admin\AppData\Local\Temp\ExLoadFree_4.22.exe"1⤵PID:912
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1800
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
- Size 10KB
- SHA256 728c9cfd134307c0dbbefc344282c946b32f7f44d9c6b8af997636359b98257e
- MD5 76895a9958fcec9da538d1d9f09db9c2
- SHA1 fd939724a66719fd6acfb55cd44ce901c9cb5fbd
- SHA512 f773262b808ec110def178dc79fb8da03bed38ed275fb6d002afe80a34f28f68f619163d589946eb3c8acadf436e72682a2a721fc3907718a903c84f02d93db6
- SSDEEP 192:9JAFJr9oBiV7vi12YJrtkp1NDudAksz2ZUhmkspSRRPQRe1xjJVjeQ8RJo1GAuJq:9JWJVq12krtuJ/pmXmlJVjeQ8RJo5X
- MD5 SHA1 SHA512 SSDEEP