Analysis
-
max time kernel
308s -
max time network
308s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
13/01/2022, 19:20
General
-
Target
Setup OMEGA Ampworks Granophyre v1.0.0.exe
-
Size
139.8MB
-
MD5
e0d87e7d53e4ab2fdb549ba1c6fd2924
-
SHA1
7f862d131b50b1745e651d1f82b05c38d758df6b
-
SHA256
abac0a641e35d5de035b9b03824a5d8e6c1b51725de9a571be55d261ced6b75a
-
SHA512
6f7cc4cf66105411e42d3d751368e6604db95aabf8255376421522ba5f2f5f8696e9f7d72028fda2080652416984dbdcabcc2be2a8960ceef0d07c56521fa26c
Score
10/10
Malware Config
Signatures
-
Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
-
mimikatz is an open source tool to dump credentials on Windows 2 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup OMEGA Ampworks Granophyre v1.0.0.exe"C:\Users\Admin\AppData\Local\Temp\Setup OMEGA Ampworks Granophyre v1.0.0.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-163TT.tmp\Setup OMEGA Ampworks Granophyre v1.0.0.tmp"C:\Users\Admin\AppData\Local\Temp\is-163TT.tmp\Setup OMEGA Ampworks Granophyre v1.0.0.tmp" /SL5="$C0154,146016324,143360,C:\Users\Admin\AppData\Local\Temp\Setup OMEGA Ampworks Granophyre v1.0.0.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
180KB
-
Filesize
224KB
-
Filesize
1.6MB
-
Filesize
388KB
-
Filesize
388KB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
640KB
-
Filesize
628KB
-
Filesize
348KB
-
Filesize
12.3MB
-
Filesize
224KB
-
Filesize
1.1MB
-
Filesize
560KB
-
Filesize
168KB
-
Filesize
200KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
388KB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
640KB
-
Filesize
1.6MB
-
Filesize
20KB
-
Filesize
348KB
-
Filesize
12.3MB
-
Filesize
492KB
-
Filesize
524KB
-
Filesize
92KB
-
Filesize
980KB
-
Filesize
4KB
-
Filesize
228KB
-
Filesize
1.1MB
-
Filesize
216KB
-
Filesize
388KB
-
Filesize
200KB
-
Filesize
572KB
-
Filesize
640KB
-
Filesize
628KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
72KB
-
Filesize
492KB
-
Filesize
76KB
-
Filesize
524KB
-
Filesize
560KB
-
Filesize
200KB
-
Filesize
228KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
156KB
-
Filesize
388KB
-
Filesize
640KB
-
Filesize
20KB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
524KB
-
Filesize
560KB
-
Filesize
200KB
-
Filesize
228KB