Analysis
-
max time kernel
125s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe
Resource
win10v2004-20240508-en
General
-
Target
d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe
-
Size
5.7MB
-
MD5
d96964527720384d74a933e165c5718d
-
SHA1
f6716e10398759cfd239f00d8bf3cb73dcfd5ce2
-
SHA256
d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83
-
SHA512
66dab4c53abead289fc3eb3c53c674771aedf36cea6a639a9acdc544c558b5e372b1491bedddf299df93f7382070bb85d5329e007d7e26931d797d1f9add6dea
-
SSDEEP
98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmhkVY:mMD+cpvJ/4H3nmghWoa/fsysMF4JD85X
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4416 d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe 4416 d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4416 d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4416 d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe"C:\Users\Admin\AppData\Local\Temp\d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4416
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3212,i,14648456027158448592,4956305794400220180,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:81⤵PID:2296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
652B
MD57a71c621009e6f6907e35bf93d2c42ff
SHA1070aa8d805f30bda7f299553a94402f1f39d2509
SHA25671c326bfd94c9c3cff44f23eb3f2845f1441f15c483364cb1863167307024bb8
SHA512f19e018c00eb19c3c51072724fac813d3f84648a0fed9543d6e68e77f475614dae30cf9079309b3ae0fa1939794bae91288334fc9dd6638223f84e2cfd35b797
-
Filesize
4KB
MD504b352401a2404cfdb7eb74e087d85a1
SHA119faf7d1f0f86f0d1046a00a752ea37538b98614
SHA256df635006afb191a3a68004789436e0666dff3dd8e9d55c964d7fad33d98466af
SHA5123a8c7746dfc457f3e353a359740ded190acf57aa78393d5708ae2c5a7b872823add13814d849509c8af101b7bdb1194d6ad2e0db1f819875e6deba88bd2c0564
-
Filesize
310B
MD57a12a61ffccecd59386998e4c3593630
SHA1c75fa56bd41d4796a03978e02db174b2eaba02b1
SHA2560184aa50d11ad31b531e911dfc208cf217b4bdbcc18380b6af24236d92012a29
SHA51275bc35831794875af41f8263a88211130bdc1c39e4712ea35f01ed40406d07b2345ac98a3ea4ade0cce86b843f0205f586c47571d1d7dabbbaf5b331b3701aa2