Overview
overview
9Static
static
7purify.zip
windows11-21h2-x64
1bin/Ace/ac...kai.js
windows11-21h2-x64
3bin/Ace/ac...ark.js
windows11-21h2-x64
3bin/Ace/ac...ark.js
windows11-21h2-x64
3bin/Ace/ac...ark.js
windows11-21h2-x64
3bin/Ace/ac...ght.js
windows11-21h2-x64
3bin/Ace/ac...ver.js
windows11-21h2-x64
3bin/Ace/ac...nal.js
windows11-21h2-x64
3bin/Ace/ac...ate.js
windows11-21h2-x64
3bin/Ace/ac...row.js
windows11-21h2-x64
3bin/Ace/ac...ght.js
windows11-21h2-x64
3bin/Ace/ac...lue.js
windows11-21h2-x64
3bin/Ace/ac...ght.js
windows11-21h2-x64
3bin/Ace/ac...ies.js
windows11-21h2-x64
3bin/Ace/ac...ght.js
windows11-21h2-x64
3bin/Ace/ac...ink.js
windows11-21h2-x64
3bin/Ace/ac...ode.js
windows11-21h2-x64
3bin/Ace/ac...ase.js
windows11-21h2-x64
3bin/Ace/ac...fee.js
windows11-21h2-x64
3bin/Ace/ac...css.js
windows11-21h2-x64
3bin/Ace/ac...tml.js
windows11-21h2-x64
3bin/Ace/ac...ipt.js
windows11-21h2-x64
3bin/Ace/ac...son.js
windows11-21h2-x64
3bin/Ace/ac...lua.js
windows11-21h2-x64
3bin/Ace/ac...php.js
windows11-21h2-x64
3bin/Ace/ac...xml.js
windows11-21h2-x64
3bin/Ace/ac...ery.js
windows11-21h2-x64
3bin/last_data.json
windows11-21h2-x64
3flint.dll
windows11-21h2-x64
9main.exe
windows11-21h2-x64
7runtimes/w...er.dll
windows11-21h2-x64
1scripts/test.lua
windows11-21h2-x64
3Analysis
-
max time kernel
146s -
max time network
277s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system -
submitted
12-07-2024 17:11
Behavioral task
behavioral1
Sample
purify.zip
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
bin/Ace/ace/theme-monokai.js
Resource
win11-20240709-en
Behavioral task
behavioral3
Sample
bin/Ace/ace/theme-nord_dark.js
Resource
win11-20240709-en
Behavioral task
behavioral4
Sample
bin/Ace/ace/theme-pastel_on_dark.js
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
bin/Ace/ace/theme-solarized_dark.js
Resource
win11-20240709-en
Behavioral task
behavioral6
Sample
bin/Ace/ace/theme-solarized_light.js
Resource
win11-20240709-en
Behavioral task
behavioral7
Sample
bin/Ace/ace/theme-sqlserver.js
Resource
win11-20240709-en
Behavioral task
behavioral8
Sample
bin/Ace/ace/theme-terminal.js
Resource
win11-20240709-en
Behavioral task
behavioral9
Sample
bin/Ace/ace/theme-textmate.js
Resource
win11-20240709-en
Behavioral task
behavioral10
Sample
bin/Ace/ace/theme-tomorrow.js
Resource
win11-20240709-en
Behavioral task
behavioral11
Sample
bin/Ace/ace/theme-tomorrow_night.js
Resource
win11-20240709-en
Behavioral task
behavioral12
Sample
bin/Ace/ace/theme-tomorrow_night_blue.js
Resource
win11-20240709-en
Behavioral task
behavioral13
Sample
bin/Ace/ace/theme-tomorrow_night_bright.js
Resource
win11-20240709-en
Behavioral task
behavioral14
Sample
bin/Ace/ace/theme-tomorrow_night_eighties.js
Resource
win11-20240709-en
Behavioral task
behavioral15
Sample
bin/Ace/ace/theme-twilight.js
Resource
win11-20240709-en
Behavioral task
behavioral16
Sample
bin/Ace/ace/theme-vibrant_ink.js
Resource
win11-20240709-en
Behavioral task
behavioral17
Sample
bin/Ace/ace/theme-xcode.js
Resource
win11-20240709-en
Behavioral task
behavioral18
Sample
bin/Ace/ace/worker-base.js
Resource
win11-20240709-en
Behavioral task
behavioral19
Sample
bin/Ace/ace/worker-coffee.js
Resource
win11-20240709-en
Behavioral task
behavioral20
Sample
bin/Ace/ace/worker-css.js
Resource
win11-20240709-en
Behavioral task
behavioral21
Sample
bin/Ace/ace/worker-html.js
Resource
win11-20240709-en
Behavioral task
behavioral22
Sample
bin/Ace/ace/worker-javascript.js
Resource
win11-20240709-en
Behavioral task
behavioral23
Sample
bin/Ace/ace/worker-json.js
Resource
win11-20240709-en
Behavioral task
behavioral24
Sample
bin/Ace/ace/worker-lua.js
Resource
win11-20240709-en
Behavioral task
behavioral25
Sample
bin/Ace/ace/worker-php.js
Resource
win11-20240709-en
Behavioral task
behavioral26
Sample
bin/Ace/ace/worker-xml.js
Resource
win11-20240709-en
Behavioral task
behavioral27
Sample
bin/Ace/ace/worker-xquery.js
Resource
win11-20240709-en
Behavioral task
behavioral28
Sample
bin/last_data.json
Resource
win11-20240709-en
Behavioral task
behavioral29
Sample
flint.dll
Resource
win11-20240709-en
Behavioral task
behavioral30
Sample
main.exe
Resource
win11-20240709-en
Behavioral task
behavioral31
Sample
runtimes/win-x64/native/WebView2Loader.dll
Resource
win11-20240709-en
Behavioral task
behavioral32
Sample
scripts/test.lua
Resource
win11-20240709-en
General
-
Target
purify.zip
-
Size
15.7MB
-
MD5
5abce42f3417d21eded9f7c7e02242d1
-
SHA1
3b781bd5357f44f715a72676895600a1b6a9d7dd
-
SHA256
7b7375dbd8fc6089d9c74f15b97126582e50625b2790ece0707c15837de22574
-
SHA512
93695a22c9ac7d37f1011bbac1792b4cdb8cf0c6fda73962a8354ad53fc1b1e3caff97a40abc61037e050d8e4471d6b82a6becdde316ea5696cb94a36891c20f
-
SSDEEP
393216:zUM9Wo6LXidEwTVKIUD2cd85IjDvCvP/K9Q:z9ltdEZNA5IjLOPh
Malware Config
Signatures
-
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-514081398-208714212-3319599467-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1452 MiniSearchHost.exe
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\purify.zip1⤵PID:2076
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1452
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Filesize10KB
MD52aaa4134481f6d4ef6b44658d489618a
SHA1a30f020b4ea91f8bb2875813b2e8036a679e74c1
SHA25656ffdcba29a25e206349d6f8805f3c8559d7b2eab82475e6b8fc6316c02aa964
SHA512f4ffae089eaacfc819103dca1c330995b90ab797d3b2e9403da909691cda4cdcea2ba7b97046cd14c84c44bddc6ee565303b9dd4273dd1444224a343d4591b45