Analysis

  • max time kernel
    125s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 19:53

General

  • Target

    d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe

  • Size

    5.7MB

  • MD5

    d96964527720384d74a933e165c5718d

  • SHA1

    f6716e10398759cfd239f00d8bf3cb73dcfd5ce2

  • SHA256

    d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83

  • SHA512

    66dab4c53abead289fc3eb3c53c674771aedf36cea6a639a9acdc544c558b5e372b1491bedddf299df93f7382070bb85d5329e007d7e26931d797d1f9add6dea

  • SSDEEP

    98304:j/6n94bDY2EBcBuq62V///4nAWakrn7S/IhWoaVVfs/VIsMF4JD8iulhq7NmhkVY:mMD+cpvJ/4H3nmghWoa/fsysMF4JD85X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe
    "C:\Users\Admin\AppData\Local\Temp\d26cf61208d3ddc171df904f5cf15e199b2f7ffab605673af74fc1b1b02ebb83.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:4416
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3212,i,14648456027158448592,4956305794400220180,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
    1⤵
      PID:2296

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

      Filesize

      652B

      MD5

      7a71c621009e6f6907e35bf93d2c42ff

      SHA1

      070aa8d805f30bda7f299553a94402f1f39d2509

      SHA256

      71c326bfd94c9c3cff44f23eb3f2845f1441f15c483364cb1863167307024bb8

      SHA512

      f19e018c00eb19c3c51072724fac813d3f84648a0fed9543d6e68e77f475614dae30cf9079309b3ae0fa1939794bae91288334fc9dd6638223f84e2cfd35b797

    • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

      Filesize

      4KB

      MD5

      04b352401a2404cfdb7eb74e087d85a1

      SHA1

      19faf7d1f0f86f0d1046a00a752ea37538b98614

      SHA256

      df635006afb191a3a68004789436e0666dff3dd8e9d55c964d7fad33d98466af

      SHA512

      3a8c7746dfc457f3e353a359740ded190acf57aa78393d5708ae2c5a7b872823add13814d849509c8af101b7bdb1194d6ad2e0db1f819875e6deba88bd2c0564

    • C:\Users\Admin\AppData\Local\Temp\yjs_log\log.log

      Filesize

      310B

      MD5

      7a12a61ffccecd59386998e4c3593630

      SHA1

      c75fa56bd41d4796a03978e02db174b2eaba02b1

      SHA256

      0184aa50d11ad31b531e911dfc208cf217b4bdbcc18380b6af24236d92012a29

      SHA512

      75bc35831794875af41f8263a88211130bdc1c39e4712ea35f01ed40406d07b2345ac98a3ea4ade0cce86b843f0205f586c47571d1d7dabbbaf5b331b3701aa2