Analysis
-
max time kernel
73s -
max time network
79s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2023, 20:40
Static task
static1
Behavioral task
behavioral1
Sample
Vega X/Vega X.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Vega X/Vega X.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Vega X/bin/FluxInteractions.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Vega X/bin/FluxInteractions.dll
Resource
win10v2004-20230915-en
General
-
Target
Vega X/Vega X.exe
-
Size
7.2MB
-
MD5
0d1b9d2d5b85391e82453781bfe00418
-
SHA1
726aaed369d012fb875507fe832adc7383d49cf1
-
SHA256
607edac6bea52a4ed99f07b5670f7896a25770d87e14dbc94d5fdc33145fb6ff
-
SHA512
01b8a86a55da77341fd5b3fec77fd50ca2ba3f235acbd936d869934120c91de3a01575e6aebe550b46704f88b0664de91b797b458d9d8834e8355e9b20b61063
-
SSDEEP
196608:xG2zS/1s5VsKYNRSWsQPQJvCvHm9EVi9RXUykSI:xGsEqVnQwxQjHmuiTEykS
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4640 Vega X.exe 4640 Vega X.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4640 Vega X.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4640 Vega X.exe