Overview

overview

3

Static

static

3

lcrUm2TTQjkC.exe

windows11-21h2-x64

1

Analysis

  • max time kernel
    30s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    08/08/2024, 09:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    lcrUm2TTQjkC.exe

  • Size

    1.4MB

  • MD5

    025c9c1d81a59636b571bdeb5771e88b

  • SHA1

    1699b594612cb29084c10117dc17762ee94c2f78

  • SHA256

    d16f4df6d0a0b0993748bd01ffd6f4ef8bdf1a57399f4310583986b9fbf0be40

  • SHA512

    06fda7f365306f717cf328d56f4be0c8ee5f3752dc09d2d2dcaabdf225bed13e7a02478543aedb01cec47ea39d8d59a85939515066dadc37e951ec3c95c93139

  • SSDEEP

    24576:iJgvkMzSYAM9YSlbczEpQizftQDc06WogeOfQr0W:itMzLAVStcdiTgFoR2A0W

Score
1/10

Malware Config

Signatures

  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\lcrUm2TTQjkC.exe
    "C:\Users\Admin\AppData\Local\Temp\lcrUm2TTQjkC.exe"
    1⤵
      PID:832
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3192
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:5104

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
              Filesize

              10KB

              MD5

              a73ea6e1db27acedbe4055c448f82ef7

              SHA1

              01769a266d26c4b4b374099606e86b8874ddd55f

              SHA256

              c3059c62596021e555ec7901361fcde75078ad931bcac6027539930bef8b77d9

              SHA512

              f9cfe99077e40ac3ff11ab39020d6e159ec06cf50f9b1d156858198d48851d29de8882a18609a17dd30ddea421c6c415683b8d7b14fa30a51ddd1cd76032deb4

              Download Submit