Overview
overview
4Static
static
1968604ff6b...a1.cab
windows7-x64
1968604ff6b...a1.cab
windows10-2004-x64
1DesktopTar...ml.cab
windows7-x64
1DesktopTar...ml.cab
windows10-2004-x64
1DesktopTar...al.xml
windows7-x64
3DesktopTar...al.xml
windows10-2004-x64
1Mitigation.dll
windows10-2004-x64
1ReserveManager.dll
windows10-2004-x64
1TurboStack.dll
windows10-2004-x64
4UAOneSettings.dll
windows10-2004-x64
1UpdateAgent.dll
windows10-2004-x64
1WinREAgent.dll
windows10-2004-x64
1dpx.dll
windows10-2004-x64
1wcp.dll
windows10-2004-x64
1Analysis
-
max time kernel
114s -
max time network
119s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
09-08-2024 00:22
Static task
static1
Behavioral task
behavioral1
Sample
968604ff6b863b0290aa50e25cd5df4521d88b9eadbc91be9a371d29caa8f4a1.cab
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
968604ff6b863b0290aa50e25cd5df4521d88b9eadbc91be9a371d29caa8f4a1.cab
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
DesktopTargetServicedCompDB_Neutral.xml.cab
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
DesktopTargetServicedCompDB_Neutral.xml.cab
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
DesktopTargetServicedCompdb_Neutral.xml
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
DesktopTargetServicedCompdb_Neutral.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Mitigation.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
ReserveManager.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
TurboStack.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
UAOneSettings.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
UpdateAgent.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
WinREAgent.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
dpx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
wcp.dll
Resource
win10v2004-20240802-en
General
-
Target
UAOneSettings.dll
-
Size
89KB
-
MD5
2f0e728d6c334f2f7dc4bc0ef45862ae
-
SHA1
bdeb60e8a9bd30360329ccc8da5669ae92bf4da8
-
SHA256
1873a06228904f122c3a1347a7c3726c67cca7b84e0f7dd505eed9825ae2783f
-
SHA512
b2b920741a8211e0785d49a368de42434cfbc0cb26389cc0296b8772b896853352b9b7226b191f9af51c4e2ca07b06a6f094886ff345626f68d9082f73fb0234
-
SSDEEP
1536:4D/vERVZrOi921a8BwTQQLbON3nnwMmvuY8VSC8FOlgfF5QgMXMHyRpEPnzb:sERfr3IwhON3nnwNvRNOleFKgMXMHkp0
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\UAOneSettings.dll,#11⤵PID:4848
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4396,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:81⤵PID:4352