Analysis
-
max time kernel
125s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28-09-2024 11:52
Static task
static1
Behavioral task
behavioral1
Sample
psshutdown64.exe
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
psshutdown64.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
psshutdown64.exe
-
Size
790KB
-
MD5
b5b4abc85d5d8c817ce552c3c6a0aba5
-
SHA1
3f4805854201987dd3d7b834cd5a1958d2cd82f5
-
SHA256
4226738489c2a67852d51dbf96574f33e44e509bc265b950d495da79bb457400
-
SHA512
db4eabbd938550e66fe1b75ad7d5a31bbdfb08be89ad4b39260fc4759ac1b60191fe336cc89a32179e5c7782c42ed597f6b1adc376f26d96c780736f7760c995
-
SSDEEP
24576:YADxH+T+4NEc7z8zeE7X71dv8h0lhSMXlN9vx:YAwTJj7zWRdpLvx
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\psshutdown64.exe"C:\Users\Admin\AppData\Local\Temp\psshutdown64.exe"1⤵PID:3664
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4628,i,16315016104747277319,5510969007830467313,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:81⤵PID:5020