Analysis
-
max time kernel
125s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
03/07/2024, 13:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
download.exe
Resource
win7-20240611-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
download.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
download.exe
-
Size
266KB
-
MD5
6d11ea30a230948c37b6f17612ce2a2f
-
SHA1
5e74dd98d1238e39f58e3b5f8c78fdb46f1bfeb5
-
SHA256
383db3684346e162c82958a99f2aa1180d736ebd15fb9b44d598f1cf8a4b01c4
-
SHA512
1d62f8dfe1edd43df66429b5fb018f6539d1d38b0842ec116b8ce752d693b5f0de88a93cb0ba3f3e2999de574c4670bc177aff51e70e390df3bb4849ebccffa8
-
SSDEEP
6144:Oe/I7sf7UUtw/1zcqp5utLyo0WhOw4f4JfnbA8+ym9KEkrP8Dl:HtTzGJcWeyWhWAhb5Tm9KEkr0Dl
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
pid Process 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe 1400 download.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\download.exe"C:\Users\Admin\AppData\Local\Temp\download.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1400
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4040,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=1040 /prefetch:81⤵PID:4972