Analysis
-
max time kernel
3s -
platform
windows10-1703_x64 -
resource
win10-20231020-en -
resource tags
-
submitted
23/11/2023, 05:36
General
-
Target
Loaders/WZ2 AIO V1.exe
-
Size
14.6MB
-
MD5
5970e53083880e6767ea08f87393a536
-
SHA1
f73d0179d873df4c3ed3b9f160e796794664f5eb
-
SHA256
92f3f6699cd08b4cffc6ebccefcd04b3de622fe274e39c73b6914c3a63e22c84
-
SHA512
dfd83e07c05df190b499ac52846a790f4c552b47b57ede83ff98ad63690a5d004b1dcd7d0fc4cabd2dc92a511b0f28788ec491e8900b65c168c02544dc13cfcb
-
SSDEEP
393216:7Ka5MDbCIi/wej7FyaUJQUbEnUN68ZrZA6i:715MDbCIi3/FyaU9gnUN6l
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Loaders\WZ2 AIO V1.exe"C:\Users\Admin\AppData\Local\Temp\Loaders\WZ2 AIO V1.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c certutil -hashfile "C:\Users\Admin\AppData\Local\Temp\Loaders\WZ2 AIO V1.exe" MD5 | find /i /v "md5" | find /i /v "certutil"2⤵
-
C:\Windows\system32\certutil.execertutil -hashfile "C:\Users\Admin\AppData\Local\Temp\Loaders\WZ2 AIO V1.exe" MD53⤵
-
-
C:\Windows\system32\find.exefind /i /v "certutil"3⤵
-
-
C:\Windows\system32\find.exefind /i /v "md5"3⤵
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
24.4MB
-
Filesize
24.4MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
24.4MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB