Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
13/02/2024, 01:45
General
-
Target
982aab833d3888f47096230f3181f40b.exe
-
Size
3.4MB
-
MD5
982aab833d3888f47096230f3181f40b
-
SHA1
8c436504c39adaa52e5d91ef1c322b07d65feec4
-
SHA256
04b87fc62650544883e25d8ffd0f1d1456ad276681337780e50aff8044282669
-
SHA512
50aae2c44227e3291011fb6738b6569a033a1d332a58cf8bb1ff161f5fdce008c9386025a422540e6593e306d295f192f3621b47f9bcf5d36022332db9f986ef
-
SSDEEP
24576:z9/27I46d0HF8uJgIXKJVCpsbM2bYSO/trDAx:zld68GrKJra
Score
10/10
Malware Config
Signatures
-
Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\982aab833d3888f47096230f3181f40b.exe"C:\Users\Admin\AppData\Local\Temp\982aab833d3888f47096230f3181f40b.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.4MB
-
Filesize
4KB