442c5e4c8e56bf5fb453fa70d9afefac6d8aad0d861db57055ad4e8bbe31535f | Triage

Submit
Reports

Overview

overview

Static

static

3

AA Master ...DF.exe

windows7-x64

AA Master ...DF.exe

windows10-2004-x64

ActionCenter.dll

windows7-x64

1

ActionCenter.dll

windows10-2004-x64

1

attach.dll

windows7-x64

1

attach.dll

windows10-2004-x64

1

jawt.dll

windows7-x64

1

jawt.dll

windows10-2004-x64

1

jli.dll

windows7-x64

1

jli.dll

windows10-2004-x64

5

msvcp140.dll

windows7-x64

1

msvcp140.dll

windows10-2004-x64

1

ucrtbase.dll

windows10-2004-x64

1

vcruntime140.dll

windows7-x64

1

vcruntime140.dll

windows10-2004-x64

1

vcruntime140_1.dll

windows7-x64

1

vcruntime140_1.dll

windows10-2004-x64

1

verify.dll

windows7-x64

1

verify.dll

windows10-2004-x64

1

Analysis

max time kernel
131s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18-09-2024 11:05

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AA Master Maritime Final Draft 92000118289301-PDF.exe

Resource

win7-20240903-en

agenttesla credential_access discovery keylogger spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

AA Master Maritime Final Draft 92000118289301-PDF.exe

Resource

win10v2004-20240802-en

agenttesla credential_access discovery keylogger spyware stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral3

Sample

ActionCenter.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

ActionCenter.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

attach.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

attach.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

jawt.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

jawt.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

jli.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

jli.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

msvcp140.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

msvcp140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

ucrtbase.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

vcruntime140.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

vcruntime140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

vcruntime140_1.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

vcruntime140_1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

verify.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

verify.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

ActionCenter.dll
Size

2.6MB
MD5

27884e7c7b1c1c5dcae66227bf45d8d0
SHA1

69f6f820a8d6978768fcd9eaa11fba8e566a6722
SHA256

68c281970b08fbe128d1f303632d46b28fb7f0e4c2db3d7f007d3864917dbf2f
SHA512

6c08793c959a2e675fdca10495168d4b0d79bbf8778749b6246461b326c4a1a881731ed8957701fefbd1c1c77bb1bafa9769eff8c1a9db1ed9b9d655c5489180
SSDEEP

24576:85Op2XP0c3C9uapvGe2oEPUPKrt1RD6h4DnLTHRoJYlCuFGmAaToNjUSZnamzRbV:FwLcuapRCUPKrt10CDnWwCuFGmWySfV

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ActionCenter.dll,#1
1⤵
PID:4080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4300,i,2904906934812054273,11716976550456127484,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
1⤵
PID:6116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy