Overview
overview
10Static
static
3setupV4.5.zip
windows7-x64
1setupV4.5.zip
windows10-2004-x64
1AcXtrnal.dll
windows10-2004-x64
3AdaptiveCards.dll
windows10-2004-x64
3SetupV4.5.exe
windows7-x64
1SetupV4.5.exe
windows10-2004-x64
10SetupV4.5/...er.dll
windows10-2004-x64
3SetupV4.5/...dm.dll
windows10-2004-x64
3SetupV4.5/afunix.sys
windows10-2004-x64
1SetupV4.5/...pi.dll
windows10-2004-x64
3acwow64.dll
windows10-2004-x64
3Analysis
-
max time kernel
124s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/08/2024, 20:39
Static task
static1
Behavioral task
behavioral1
Sample
setupV4.5.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
setupV4.5.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
AcXtrnal.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
AdaptiveCards.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
SetupV4.5.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
SetupV4.5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
SetupV4.5/AddressParser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
SetupV4.5/Apphlpdm.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
SetupV4.5/afunix.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
SetupV4.5/appidapi.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
acwow64.dll
Resource
win10v2004-20240802-en
General
-
Target
SetupV4.5/afunix.sys
-
Size
30KB
-
MD5
66e126ffbbda83ec089d1bb77164ba91
-
SHA1
d784850e42c29e5d22f5d3e91d5ea5d6ecd124e6
-
SHA256
bb83da6810925f0b28c7d22ac1f99f46e312b2669b81ee207a66a3650ca9fd94
-
SHA512
d19b21b7de34469e09335aa82b6e06a106e36cacf59be8a549d7e70a8fbb4e22d29f4a5166ee77373770ce354b64277ddb37400bb5eda95408b099a7d7edbfdc
-
SSDEEP
768:98D6z7qHpekPfjTEPfPZFTqzK3J46aWevll:9Q63qHpeQsPPsKovll
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\SetupV4.5\afunix.sys1⤵PID:2440
-
C:\Users\Admin\AppData\Local\Temp\SetupV4.5\afunix.sysC:\Users\Admin\AppData\Local\Temp\SetupV4.5\afunix.sys2⤵PID:3324
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4380,i,11251706013556949551,5157034131170452377,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:81⤵PID:752