Overview
overview
10Static
static
3setupV4.5.zip
windows10-2004-x64
1setupV4.5/...al.dll
windows10-2004-x64
3setupV4.5/...ds.dll
windows10-2004-x64
3setupV4.5/....5.exe
windows10-2004-x64
10setupV4.5/...er.dll
windows10-2004-x64
3setupV4.5/...dm.dll
windows10-2004-x64
3setupV4.5/...ix.sys
windows10-2004-x64
1setupV4.5/...pi.dll
windows10-2004-x64
3setupV4.5/acwow64.dll
windows10-2004-x64
3Analysis
-
max time kernel
233s -
max time network
258s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
04-08-2024 14:24
Static task
static1
Behavioral task
behavioral1
Sample
setupV4.5.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
setupV4.5/AcXtrnal.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
setupV4.5/AdaptiveCards.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
setupV4.5/SetupV4.5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
setupV4.5/SetupV4.5/AddressParser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
setupV4.5/SetupV4.5/Apphlpdm.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
setupV4.5/SetupV4.5/afunix.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
setupV4.5/SetupV4.5/appidapi.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
setupV4.5/acwow64.dll
Resource
win10v2004-20240802-en
General
-
Target
setupV4.5.zip
-
Size
15.0MB
-
MD5
0885d0c87354528911f49d315897fdd1
-
SHA1
5fe60967ed1afa998376f712e4fa8af3bca1fa88
-
SHA256
242d45f5768636258f25d282c74c933d2707fb13a7a54e893329ecc9e13ef50f
-
SHA512
ed957e4a9361f3af3b99d2347b049d6a20921fd0e802dc9e5b01f3ef8da92134056a5ef9170f817e7c6bf4ec08cf107ffbb59eae4f76a669ddedca71c7d0bae8
-
SSDEEP
393216:9KKjdAJ/kHfMO2/w1kBY8l5aFEYF/pAYfxXaI+vQkXLLcDlE610C9:9KKjKsHfMO2/wBFFF/pAYfR0vQk8DlNr
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\setupV4.5.zip1⤵PID:4388
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4056,i,9445584274764997943,12714240264001792460,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:81⤵PID:4272