Analysis

  • max time kernel
    1794s
  • max time network
    1800s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/08/2024, 18:20

General

  • Target

    tif.exe

  • Size

    31.0MB

  • MD5

    db6066e317170596cdf178a907c2091c

  • SHA1

    81326336064482282ffb9f36bbf6beab3f08ff7d

  • SHA256

    c91ada6918f5bca20aa48547c55b6799a2fc19404d6293df05ea4405d0940ed1

  • SHA512

    65d5316706cbc127b93a404ea8a3a588b9bb5f28214846ae478c387ae250d75ed47c3fa0eb9875ad23dddfb08fe21ec0dda88f63e6a7e581ba9a49be645a8551

  • SSDEEP

    786432:CFbP0HmLA5HSbW++lMmfMz+xOI/QzTxS4CeA4dwr1cY4QrYIUSoim:QIFHQWNlnfawk9q2gt4nfn

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\tif.exe
    "C:\Users\Admin\AppData\Local\Temp\tif.exe"
    1⤵
      PID:4860
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3000,i,2727319350781907497,7925939240893079607,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
      1⤵
        PID:1920
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3952,i,2727319350781907497,7925939240893079607,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:8
        1⤵
          PID:2260

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4860-0-0x00007FFDA4755000-0x00007FFDA4756000-memory.dmp

                Filesize

                4KB

              • memory/4860-1-0x000000001E300000-0x000000001E7CE000-memory.dmp

                Filesize

                4.8MB

              • memory/4860-2-0x00007FFDA44A0000-0x00007FFDA4E41000-memory.dmp

                Filesize

                9.6MB

              • memory/4860-3-0x000000001DD70000-0x000000001DE0C000-memory.dmp

                Filesize

                624KB

              • memory/4860-4-0x00007FFDA44A0000-0x00007FFDA4E41000-memory.dmp

                Filesize

                9.6MB

              • memory/4860-5-0x0000000003730000-0x0000000003738000-memory.dmp

                Filesize

                32KB

              • memory/4860-6-0x00007FFDA44A0000-0x00007FFDA4E41000-memory.dmp

                Filesize

                9.6MB

              • memory/4860-7-0x00007FFDA44A0000-0x00007FFDA4E41000-memory.dmp

                Filesize

                9.6MB

              • memory/4860-8-0x00007FFDA44A0000-0x00007FFDA4E41000-memory.dmp

                Filesize

                9.6MB

              • memory/4860-9-0x00007FFDA4755000-0x00007FFDA4756000-memory.dmp

                Filesize

                4KB

              • memory/4860-10-0x00007FFDA44A0000-0x00007FFDA4E41000-memory.dmp

                Filesize

                9.6MB