Analysis
-
max time kernel
151s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
23-10-2023 20:10
General
-
Target
NEAS.76b265b24aa1662ba9c0051068da11c0_JC.exe
-
Size
6.5MB
-
MD5
76b265b24aa1662ba9c0051068da11c0
-
SHA1
5db9546faf0f8da703d02ad17765f6cda2ef89c4
-
SHA256
05c59a08729fd1bf54f815eb85d39c7d3815dc9d80b65c9d08b753f8891fe6db
-
SHA512
cd203ca17e227fb4cc4cf3fb9424e365edf0e4faf2aa9fe4ca71c8265b99afbf1fd2ebb6bd8254f774309ac99858dd310247f7ed2ad316154eb88a60e3f537c8
-
SSDEEP
196608:mdkkrmgC/BqfL+m7eSKSpE3cTrgP09ZcZ0j:7kr4sfCm7ergEkgPdq
Score
10/10
Malware Config
Signatures
-
Detected Ploutus loader 34 IoCs
-
Ploutus
Ploutus is an ATM malware written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.76b265b24aa1662ba9c0051068da11c0_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.76b265b24aa1662ba9c0051068da11c0_JC.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
9.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
5.6MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
7.7MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
64KB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
64KB
-
Filesize
9.8MB