442c5e4c8e56bf5fb453fa70d9afefac6d8aad0d861db57055ad4e8bbe31535f | Triage

Submit
Reports

Overview

overview

Static

static

3

AA Master ...DF.exe

windows7-x64

AA Master ...DF.exe

windows10-2004-x64

ActionCenter.dll

windows7-x64

1

ActionCenter.dll

windows10-2004-x64

1

attach.dll

windows7-x64

1

attach.dll

windows10-2004-x64

1

jawt.dll

windows7-x64

1

jawt.dll

windows10-2004-x64

1

jli.dll

windows7-x64

1

jli.dll

windows10-2004-x64

5

msvcp140.dll

windows7-x64

1

msvcp140.dll

windows10-2004-x64

1

ucrtbase.dll

windows10-2004-x64

1

vcruntime140.dll

windows7-x64

1

vcruntime140.dll

windows10-2004-x64

1

vcruntime140_1.dll

windows7-x64

1

vcruntime140_1.dll

windows10-2004-x64

1

verify.dll

windows7-x64

1

verify.dll

windows10-2004-x64

1

Analysis

max time kernel
234s
max time network
251s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18-09-2024 07:14

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AA Master Maritime Final Draft 92000118289301-PDF.exe

Resource

win7-20240708-en

agenttesla credential_access discovery keylogger spyware stealer trojan

windows7-x64

8 signatures

300 seconds

Behavioral task

behavioral2

Sample

AA Master Maritime Final Draft 92000118289301-PDF.exe

Resource

win10v2004-20240802-en

agenttesla credential_access discovery keylogger spyware stealer trojan

windows10-2004-x64

8 signatures

300 seconds

Behavioral task

behavioral3

Sample

ActionCenter.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

ActionCenter.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

attach.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

attach.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

jawt.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

jawt.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

jli.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral10

Sample

jli.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral11

Sample

msvcp140.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral12

Sample

msvcp140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

ucrtbase.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

vcruntime140.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

vcruntime140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

vcruntime140_1.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral17

Sample

vcruntime140_1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

verify.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

verify.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

ucrtbase.dll
Size

985KB
MD5

596226a2adc84678fc417de207cd9867
SHA1

6758348f540f946cd256ce9e4c778af4d9135f41
SHA256

425470634ec67646e8d6844cf49f08cb9336458bf2a1b13fa0272d22d2ead99e
SHA512

5c6a8a8da26cab88b1206ee110a511478e6f14efc0479cba651ce12f6de4d37537bac2c30368a274d3b5eabcdc69b4e0a3dbdb6a44ae0049e1110ea55393199a
SSDEEP

24576:UhEbImsFPfhQiGlA3wubyZ9dgrGOqy78p899amxvSZX0ypkuy7I1:UhgImsFPfWFlAVyBgrRV9PuV

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ucrtbase.dll,#1
1⤵
PID:4688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1432,i,12470628711992022444,7767535593390851522,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
1⤵
PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy