Resubmissions
15/11/2025, 05:01
251115-fnthza1nay1009/10/2025, 11:39
251009-nr9y5axmw81009/10/2025, 11:18
251009-nera9assfy1009/10/2025, 11:02
251009-m43vxa11f11012/01/2024, 16:05
240112-tjpk4sbcbk6Analysis
- max time kernel
597s - max time network
608s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
12/01/2024, 16:05
General
- Target EpsilonApp.exe
- Size 147KB
- Sample240112-tjpk4sbcbk
- SHA256 b206695fb128857012fe280555a32bd389502a1b47c8974f4b405ab19921ac93
Score
6/10
Malware Config
Signatures
- Blocklisted process makes network request 36 IoCs
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\EpsilonApp.exe"C:\Users\Admin\AppData\Local\Temp\EpsilonApp.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\msiexec.exe\??\C:\Windows\System32\msiexec.exe2⤵
- Blocklisted process makes network request
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
post[1].php
memory/1468-0-0x000001D2D9A30000-0x000001D2D9C25000-memory.dmp
memory/2520-10-0x0000021516E30000-0x0000021516E60000-memory.dmp
memory/2520-13-0x0000021516E30000-0x0000021516E60000-memory.dmp
memory/2520-12-0x0000021516E30000-0x0000021516E60000-memory.dmp
memory/2520-14-0x0000021516E30000-0x0000021516E60000-memory.dmp
memory/2520-16-0x0000021516E30000-0x0000021516E60000-memory.dmp
memory/2520-15-0x0000021516E30000-0x0000021516E60000-memory.dmp
memory/2520-17-0x0000021518FE0000-0x00000215191D5000-memory.dmp
memory/2520-28-0x0000021516E30000-0x0000021516E60000-memory.dmp
memory/2520-29-0x0000021516E30000-0x0000021516E60000-memory.dmp