Overview

overview

9

Static

static

7

SkyFlick2....ot.exe

windows10-2004-x64

SkyFlick2....ID.exe

windows10-2004-x64

9

SkyFlick2....k2.exe

windows10-2004-x64

8

SkyFlick2....D2.exe

windows10-2004-x64

SkyFlick2....in.exe

windows10-2004-x64

5

SkyFlick2....in.exe

windows10-2004-x64

7

SkyFlick2....64.dll

windows10-2004-x64

3

SkyFlick2....ag.exe

windows10-2004-x64

1

SkyFlick2....rl.dll

windows10-2004-x64

3

SkyFlick2....b1.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    99s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    27-03-2023 05:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SkyFlick2.1_WIN11/data/bin.exe

  • Size

    5.3MB

  • MD5

    5ee3604fac6e53dc2f3a4486ab9afcf6

  • SHA1

    4a10abcd8ac6f75ee60d94eed5b07684a4e9117c

  • SHA256

    318ee60258ac8cd34e0eed8d471fb0a11a3be56205cbb9d853dbded659f6c787

  • SHA512

    bd28f9fb51f69c5a9926c3d2a60fa1888c70405a50ffd25586407857f792c2b373e5e04d78284f9c24a3151a296961c57f9dd2dd0dba4c4a1aab034d0b3bb8e0

  • SSDEEP

    98304:17aA6O2V2/6K+yoHKEorpSFojMHa/0EexF2zAI8J5ktPCO0xtw2qHwJVtG:17aPO2c/6OoqjSFoE40E+fSWZqHwU

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SkyFlick2.1_WIN11\data\bin.exe
    "C:\Users\Admin\AppData\Local\Temp\SkyFlick2.1_WIN11\data\bin.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/868-133-0x00007FF8C32D0000-0x00007FF8C32D2000-memory.dmp
    Filesize

    8KB

    Download
  • memory/868-134-0x00007FF8C32E0000-0x00007FF8C32E2000-memory.dmp
    Filesize

    8KB

    Download
  • memory/868-135-0x00007FF626E20000-0x00007FF6276F3000-memory.dmp
    Filesize

    8.8MB

    Download