Analysis

  • max time kernel
    156s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/07/2024, 20:02

General

  • Target

    85fc00cd373580ff152c181e4ccf12f9bcd2df6a716a0952cbbf8252d6b33486.exe

  • Size

    5.9MB

  • MD5

    61f67b134cee1f90ff97aeb9230409d7

  • SHA1

    a0297a19487ef861c36485231920be809a759d13

  • SHA256

    85fc00cd373580ff152c181e4ccf12f9bcd2df6a716a0952cbbf8252d6b33486

  • SHA512

    5c037018731c5e2439a7e2105bf0bfd8fd4a61a93aa1ad26dfbecbd30c67eca62a6c5b5637793a2988ab5533a6fd83f14c80e6b6c419d0085dd77d4a313f87ee

  • SSDEEP

    98304:8GREmNruWZtR7cOjO2ep2X0IbHcgdwZ+KWZegWtvPC3nM5boKeHpGrpoVtm5G:VREQuotR4OjO2O0XM+degWs3nM5bqHpb

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\85fc00cd373580ff152c181e4ccf12f9bcd2df6a716a0952cbbf8252d6b33486.exe
    "C:\Users\Admin\AppData\Local\Temp\85fc00cd373580ff152c181e4ccf12f9bcd2df6a716a0952cbbf8252d6b33486.exe"
    1⤵
      PID:3232
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3836 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:840
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3232 -ip 3232
        1⤵
          PID:4612

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3232-1-0x0000000001270000-0x0000000001835000-memory.dmp

          Filesize

          5.8MB

        • memory/3232-2-0x0000000001840000-0x0000000001F37000-memory.dmp

          Filesize

          7.0MB

        • memory/3232-3-0x0000000000400000-0x0000000000DDA000-memory.dmp

          Filesize

          9.9MB

        • memory/3232-4-0x0000000000400000-0x0000000000DDA000-memory.dmp

          Filesize

          9.9MB

        • memory/3232-5-0x0000000000400000-0x0000000000B02000-memory.dmp

          Filesize

          7.0MB

        • memory/3232-6-0x0000000001270000-0x0000000001835000-memory.dmp

          Filesize

          5.8MB

        • memory/3232-7-0x0000000000400000-0x0000000000DDA000-memory.dmp

          Filesize

          9.9MB

        • memory/3232-8-0x0000000001840000-0x0000000001F37000-memory.dmp

          Filesize

          7.0MB

        • memory/3232-10-0x0000000000400000-0x0000000000B02000-memory.dmp

          Filesize

          7.0MB