Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/07/2024, 23:09

General

  • Target

    resources/app.asar.unpacked/node_modules/take-cam/prey-webcam.exe

  • Size

    24KB

  • MD5

    471b15abc9f2e98fb7ed7361d3f045eb

  • SHA1

    95b5798d80a9410872f6ed485ae2b43ca3745540

  • SHA256

    7c262639cb22348dfd627dc07c76e8748e5bcacde2dcf1614773ab174c831004

  • SHA512

    5b3b59aa1dbaef31b0ff6ccde082d7c312e39e311a46fe20d590d5d7765f934d3b663da9609ff4fb7beba2e8fa85376cf74f14ae077f3c0b49189cc28c30163a

  • SSDEEP

    384:tKwddpmWq759qMMu89Y3sX9DpX0wwVJBsqIYiF9nN3ZqrhmFqn:hTpY7ztOL9DEJBsXYi6hb

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\take-cam\prey-webcam.exe
    "C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\take-cam\prey-webcam.exe"
    1⤵
    • Modifies system certificate store
    PID:4748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4748-0-0x00007FFA797E5000-0x00007FFA797E6000-memory.dmp

    Filesize

    4KB

  • memory/4748-1-0x00007FFA79530000-0x00007FFA79ED1000-memory.dmp

    Filesize

    9.6MB

  • memory/4748-7-0x000000001B430000-0x000000001B47E000-memory.dmp

    Filesize

    312KB

  • memory/4748-8-0x000000001BE00000-0x000000001BE9C000-memory.dmp

    Filesize

    624KB

  • memory/4748-10-0x00007FFA79530000-0x00007FFA79ED1000-memory.dmp

    Filesize

    9.6MB