Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows7_x64 -
resource
win7-20230220-es -
resource tags
-
submitted
09-03-2023 06:13
Errors
General
-
Target
Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe
-
Size
1.5MB
-
MD5
b920d1f385d3e91ffb80e6ab74b9a3df
-
SHA1
e9e9c1896594054bac1c0718086b402971ac146c
-
SHA256
e9f87b83554979f5c489cac4c42b3c92a58f9090d87746c21b3fc662b8bf52c2
-
SHA512
8f9e6b4b3e8f6f754d2abbb519056e11e90242885493599fc7ddcf2a7d4692c49ba26a3f4885ee3d5b857d937176c2adfa5cb0c1aea5cbc697eb011b207c7029
-
SSDEEP
24576:PjxM9j5qToXVYLt9nneX58cq6V+DGDSVXT5XfL6TwaNkya:o5qTMYZ1eycqk+LXT5XT+PW1
Malware Config
Signatures
-
Modifies system certificate store 2 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\Evil West v1.0.3-v1.0.5 Plus 16 Trainer.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x01⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x1d01⤵
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x11⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
29B
MD5100ad43a6e39d44013fad7f3aa343e3b
SHA1dc8050bdee8a74354cb4a2057e4e703e7a460943
SHA256a7b15ee77dd0db946e7fdbf574889bd30c23fa3d7bff6d509df118595ee14ec5
SHA51220f9b26416804f917d0642d35de32ccae0849c34bff4eb75c6450b1ee83756f3275850101d7482eb59c78356b1489c2d4db6cd95ae9b72b64d5eeab700d36ba8
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
200KB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
24KB
-
Filesize
512KB
-
Filesize
512KB