SUSPICIOUS — 64bbba6f24d24a0f66ba1cf6806ba1fe4769259bf212439596e39fa318bfa6e8
Verdict: suspicious (50/100) · Family: AntiDebug
File type: pe · SHA-256: 64bbba6f24d24a0f66ba1cf6806ba1fe4769259bf212439596e39fa318bfa6e8
MITRE ATT&CK
- T1112
YARA
Dynamic analysis (windows)
410 behavior events · 1 ATT&CK techniques · 11 dropped files.
Runtime network
- www.msftconnecttest.com
- searchapp.bundleassets.example
- desktop-hsgcbep
- ctldl.windowsupdate.com
- config.edge.skype.com
- login.live.com
- www.bing.com
- v20.events.data.microsoft.com
- windows.msn.com
- officeclient.microsoft.com
- fe3cr.delivery.mp.microsoft.com
- dns.msftncsi.com
- msedge.api.cdp.microsoft.com
- settings-win.data.microsoft.com
- edge.microsoft.com
- watson.events.data.microsoft.com
- aefd.nelreports.net
- assets.msn.com
- 192.168.122.112
- 224.0.0.252
Analyzed on MalwareAnalyzer by Cyble · Open interactive report