Analysis
-
max time kernel
124s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
03/07/2024, 20:23
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-03_a3e0f79e82f9c726a1002c677c288597_megazord.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-07-03_a3e0f79e82f9c726a1002c677c288597_megazord.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-07-03_a3e0f79e82f9c726a1002c677c288597_megazord.exe
-
Size
22.4MB
-
MD5
a3e0f79e82f9c726a1002c677c288597
-
SHA1
7d48f2e2f3e4b3c09f1e5d761b7a36447dcf5f38
-
SHA256
ee05b3a830db87fc30c6602f9f99d863e388d1e666a5302cd9a1b65a3f5fc30a
-
SHA512
800a67cce1a5303676aad556341f326669daac2ee6a6c2b5901bc720a5c84684b0a656df6b67baaacf830c1bb7e3729096ef0a84cf44a3eb48bcda341c1576d2
-
SSDEEP
196608:D4U8WnkKgfjSF9uZCQM6FPE5N/YIGQMenk6D90v36d1G/zWEe1/aHNc6gRYTM9zX:sWnkKgfjSFgZCQM6FPEkIr9o+Tq/cr
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 452 2024-07-03_a3e0f79e82f9c726a1002c677c288597_megazord.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-03_a3e0f79e82f9c726a1002c677c288597_megazord.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-03_a3e0f79e82f9c726a1002c677c288597_megazord.exe"1⤵
- Suspicious use of FindShellTrayWindow
PID:452
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=1036,i,13640054265074968359,8146127767143474550,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:81⤵PID:4212