Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
13-11-2023 16:57
General
-
Target
lxautold.exe
-
Size
765KB
-
MD5
f7c83410bdf578a6316d1ce543456dfa
-
SHA1
2814ed6a65dec94029a1c1e97b1a69c49b116e34
-
SHA256
145d6db252fa4247ad08d85d651bdd6e6ff9068305ce4af3b9dca684f1a1aa5b
-
SHA512
fa9c00697cc121421f7fc682b9ce9c78cf9efcec00c6bdc8a8df002462b97319f0bac20c2fa717ceb5985da20b4088232b7f5408192e5031adb0e60047bb5a80
-
SSDEEP
12288:7h1Lk70TnvjcRydunMK6PdWmpDCLtdLQF6mghdjxjgEg+gCSrjrDQLXoF0MfF16f:Hk70TrcRxMrdWmpDYOFspxjbg+arQL6S
Score
10/10
Malware Config
Signatures
-
Detected Ploutus loader 34 IoCs
-
Ploutus
Ploutus is an ATM malware written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\lxautold.exe"C:\Users\Admin\AppData\Local\Temp\lxautold.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
960KB
-
Filesize
256KB
-
Filesize
960KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
256KB
-
Filesize
4KB
-
Filesize
6.9MB