Overview

overview

8

Static

static

chthonic_2...ir.exe

windows7_x64

chthonic_2...ir.exe

windows10_x64

Analysis

  • max time kernel
    12s
  • platform
    windows7_x64
  • resource
    win7
  • submitted
    19-07-2020 17:15

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Machine shutdown
Report Analysis Logs

General

  • Target

    chthonic_2.23.18.10.vir.exe

  • Size

    470KB

  • MD5

    54edda43ee2e20c39fea5e2dabb6c921

  • SHA1

    a4332ec867080ba63e3523cae84b093c0fcef902

  • SHA256

    9d6163d57c9c99026b1203a475f0dac06b6a75a82a83d7c0c19442cb14ba35e5

  • SHA512

    d1e8756b1980b03c98c0a0aa322277f2a38687b9e9d1ecb758d23932958248c29f9aaa6fb3a3b25581adf2852c9e61d3d76cb56f213a0f0ef5eebd22cd230bf3

Score
7/10
persistence

Malware Config

Signatures

  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Loads dropped DLL 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 212 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\chthonic_2.23.18.10.vir.exe
    "C:\Users\Admin\AppData\Local\Temp\chthonic_2.23.18.10.vir.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    • Suspicious behavior: GetForegroundWindowSpam
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Adds Run key to start application
    PID:832
  • C:\Windows\system32\LogonUI.exe
    "LogonUI.exe" /flags:0x0
    1⤵
      PID:1456
    • C:\Windows\system32\LogonUI.exe
      "LogonUI.exe" /flags:0x1
      1⤵
        PID:1068

      Network

      MITRE ATT&CK Matrix ATT&CK v6

      Initial Access

      Execution

      Persistence

      Registry Run Keys / Startup Folder

      1
      T1060

      Privilege Escalation

      Defense Evasion

      Modify Registry

      1
      T1112

      Credential Access

      Discovery

      Lateral Movement

      Collection

      Exfiltration

      Command and Control

      Impact

      Replay Monitor

      Loading Replay Monitor...

      Downloads