b70863f8bca8f584339bb8240e0778c06a639c428d32999a6fa07f8768161ce3 | Triage

Analysis

max time kernel
125s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/10/2024, 11:05

Sharing

Report Analysis Logs

General

Target

CutieT!/Cutie.exe
Size

147KB
MD5

4c0ae4629dd3bf9d148f8856cdcbc0f6
SHA1

385bfd3915e1aac2e1bdbfee0f6c7d2b3b3aa305
SHA256

1fcb837d86359d6990e2396791cb311d0fe224ece582b234913038ddcaad3092
SHA512

dc42c89ee96bc7b51767ffd5b09ebcec9576e3807fd2a22a7cd611b1cd1d3b1b4fe1f26bdc77e4322c166f723c66294a2e0083f9dded472c06e28fbfb8425346
SSDEEP

3072:65vnr5Tbx829UOeKnn2LFzZBp13u36wKp4FULCXoy:6BKjK2LFzZNf+ULe

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4692	Cutie.exe

C:\Users\Admin\AppData\Local\Temp\CutieT!\Cutie.exe
"C:\Users\Admin\AppData\Local\Temp\CutieT!\Cutie.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3840,i,11391966286255097843,10588851088187498028,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
1⤵
PID:3984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4692-0-0x00007FFEC072B000-0x00007FFEC072C000-memory.dmp

Filesize
4KB

Download
memory/4692-1-0x00007FFEC072B000-0x00007FFEC072C000-memory.dmp

Filesize
4KB

Download