Analysis
-
max time kernel
150s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 08:56
Behavioral task
behavioral1
Sample
84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe
Resource
win10v2004-20240508-en
General
-
Target
84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe
-
Size
10.5MB
-
MD5
b6d65221525b12f8233273cbee11f2bc
-
SHA1
6fc3d6b6e58734a3d4ccf34bdb49a29b53477a38
-
SHA256
84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897
-
SHA512
22f1ed2d909ad1c4a309a6d9268794b3796ea766c22d73a02c47620fe8ebde51009a31519921c16cf79bfcd06784d98d6ed9ea91a18a51d52b107cd826b4d322
-
SSDEEP
196608:mobO3B8fUbqMQIyE5V5M6g4XvvpxCoMJbMWZTC4kBSBIk+Hh3kz3x93XskE33rY:O3Ek8SV26XxCo0AWxZke+GVK3rY
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1476 84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe 1476 84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe 1476 84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe 1476 84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe"C:\Users\Admin\AppData\Local\Temp\84fb6da8e082a4f74b1bdc91229bac8160f495790b4492f1b8ffabc2e6128897.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1476
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3960,i,6166776566165096562,4582328833313060853,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:81⤵PID:2240