Resubmissions
27-07-2024 01:26
240727-btjhqs1bqc 321-02-2023 10:55
230221-m1mdragd5y 121-02-2023 10:48
230221-mwehcaee59 10Analysis
-
max time kernel
89s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
21-02-2023 10:55
General
-
Target
PandorahVNC.exe
-
Size
121.7MB
-
MD5
7e0c8dba7497c6c4239531073a04628e
-
SHA1
d82c10b1ed2527f971b2c63e75c15a6b746119b0
-
SHA256
100dc0db633b1dea1a0c5012f2364ff0d201ff203de1ea3820f432fc51751652
-
SHA512
e8e79732885f4f38c15fe1e78e740b0678de64c5b8875f590678eca8229190ab84be04724f934037a8837238431c1c0b5809eebdc5e0ee8eb610be012996b722
-
SSDEEP
3145728:Rlhah9cOLbrHMevdE5x89uYrM0cqgW05zaWPP:p09cOnrBdE5x50ce0
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 8 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PandorahVNC.exe"C:\Users\Admin\AppData\Local\Temp\PandorahVNC.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.0MB
-
Filesize
72KB
-
Filesize
5.6MB
-
Filesize
64KB
-
Filesize
584KB
-
Filesize
240KB
-
Filesize
40KB
-
Filesize
184KB
-
Filesize
64KB
-
Filesize
224KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
680KB
-
Filesize
64KB
-
Filesize
624KB
-
Filesize
64KB