Analysis
-
max time kernel
131s -
max time network
134s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
-
submitted
23/12/2023, 22:38
General
-
Target
SLAYER Leecher v0.7.exe
-
Size
6.6MB
-
MD5
aa0b6211f5245f25392b74fdbab048eb
-
SHA1
05c37446aca08847a2688257d0fb138f560b4db2
-
SHA256
74cb827e0324e02bae1b2632b624ff84bd4bd54b796bb046fa27f557ca8f8674
-
SHA512
97e44da681f5b7db132cd37b1a6305f45d5ec546a23ae3f55f8a8cd214e5c76d22947d12a844767c88fc1844f297f7ce7a85569859286b3b5816144979d05176
-
SSDEEP
196608:D15/cj6W2xcU3DNGqNFlVMHa2X9FwKMhU+/Pr:S1tU3DNGIUa2NFYU+L
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 34 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SLAYER Leecher v0.7.exe"C:\Users\Admin\AppData\Local\Temp\SLAYER Leecher v0.7.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3201⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
67KB
MD54d9943a0adc1a3bd1472bdbab649a436
SHA1f0f36e014a71e21e629cabaa835f39a4e775e092
SHA25687dd71ac71bca50d9f1179215bbc4a25783c6a959def5c1850683eb41f6b0322
SHA51221766452cd53a2344c321b042984a08bcb46dac5e2b06dcd25f1a740e4018cb0f90d39b95414febd76d4c1447efc0dcae6dfa1ee176fdfab654a4efd2e705492
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
144KB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.6MB
-
Filesize
9.9MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB