64e87032c830ebab767e08f466665da630b1f2cb0c6b79be0bb0aa44b7bfd555 | Triage

Submit
Reports

Overview

overview

Static

static

3

docs.zip

windows7-x64

1

docs.zip

windows10-2004-x64

1

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

docs/$RECY...op.ini

windows7-x64

1

docs/$RECY...op.ini

windows10-2004-x64

1

docs/.ds_store

windows7-x64

3

docs/.ds_store

windows10-2004-x64

3

docs/Syste...gs.dat

windows7-x64

3

docs/Syste...gs.dat

windows10-2004-x64

3

docs/Untit...df.exe

windows7-x64

docs/Untit...df.exe

windows10-2004-x64

docs/[SYST...ttrDef

windows7-x64

1

docs/[SYST...ttrDef

windows10-2004-x64

1

docs/[SYSTEM]/$Bitmap

windows7-x64

1

docs/[SYSTEM]/$Bitmap

windows10-2004-x64

1

docs/[SYSTEM]/$Boot

windows7-x64

1

docs/[SYSTEM]/$Boot

windows10-2004-x64

1

docs/[SYST...Config

windows7-x64

1

docs/[SYST...Config

windows10-2004-x64

1

docs/[SYST.../$Tops

windows7-x64

1

docs/[SYST.../$Tops

windows10-2004-x64

1

docs/[SYST...ops:$T

windows7-x64

1

docs/[SYST...ops:$T

windows10-2004-x64

1

docs/[SYST...og.blf

windows7-x64

3

docs/[SYST...og.blf

windows10-2004-x64

3

Analysis

max time kernel
130s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 11:52

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

docs.zip

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

docs.zip

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

__MACOSX/docs/._.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

__MACOSX/docs/._.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

__MACOSX/docs/[SYSTEM]/$Extend/$RmMetadata/._.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

__MACOSX/docs/[SYSTEM]/$Extend/$RmMetadata/._.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

__MACOSX/docs/[SYSTEM]/$Extend/._.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

__MACOSX/docs/[SYSTEM]/$Extend/._.ds_store

Resource

win10v2004-20240611-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

__MACOSX/docs/[SYSTEM]/._.ds_store

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

__MACOSX/docs/[SYSTEM]/._.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

docs/$RECYCLE.BIN/S-1-5-21-3906747542-1253890818-3570446626-1001/desktop.ini

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

docs/$RECYCLE.BIN/S-1-5-21-3906747542-1253890818-3570446626-1001/desktop.ini

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

docs/.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

docs/.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

docs/System Volume Information/WPSettings.dat

Resource

win7-20240611-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

docs/System Volume Information/WPSettings.dat

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

docs/Untitled_June_06_25_2024_export.pdf.exe

Resource

win7-20240221-en

metastealer discovery execution spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral18

Sample

docs/Untitled_June_06_25_2024_export.pdf.exe

Resource

win10v2004-20240508-en

metastealer discovery execution spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral19

Sample

docs/[SYSTEM]/$AttrDef

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

docs/[SYSTEM]/$AttrDef

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

docs/[SYSTEM]/$Bitmap

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

docs/[SYSTEM]/$Bitmap

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

docs/[SYSTEM]/$Boot

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

docs/[SYSTEM]/$Boot

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$Repair:$Config

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$Repair:$Config

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops:$T

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops:$T

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$TxfLog.blf

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral32

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$TxfLog.blf

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

docs/[SYSTEM]/$Boot
Size

8KB
MD5

83b232a9da59195661b7d6c004003ab9
SHA1

f62ea55b8fa590dc7d3727e71b29b8320e197cab
SHA256

e914f32d7ee1a0d57b1a4b8113c3231c06e710720a1aaa704c1b425cc0e85ea3
SHA512

2e3f0d1b621477f31c42e9bb72f32474704a8c1fa048b6530870a5b913b531435557af1095a247ac0a10af2ed5b1ec72fb9c5e91c40ce1b54cfa9ff1aec234ef
SSDEEP

96:vnaNcdCmGUyH52j0V6nPt4ihC/U8remKrQUqjfyJB7y4AIwVoou:C2d/5yHEj3Pt4ihCvresUDBm4lwV

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\docs\[SYSTEM]\$Boot
1⤵
PID:768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4256,i,1236064252342462940,13180713657498721890,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:8
1⤵
PID:3140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy