736427aef8c7e3d5be491726979c14871de1039dc7b161299e5917c6aac51cfa

Analysis

max time kernel
91s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14/02/2024, 02:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
minerun.exe
Size 129KB
Sample240214-clyhcsfe95
SHA256 bfac7a61df4335acfe677ca09fb1996bef63530a3867a81bfb2fceed5a123dc5
MD5 596199aebea31fbddb0044fdfb2e75ec
SHA1 00f1136ecfe4b5c7d8045f65e4ff4fd11959fd54
SHA512 52efc0b8a6890d93db74b1d3e77b0d21c1fe9c7e1300c440f49a3971b6914cd02722c9150559f882054f8c8e56e34627cef88852d626e9810bda22a96a8a3e7a
SSDEEP 1536:RYW/2vJd49J2uSF0/cyqcMYdLY3wy2vgcUZ:eW7B/cyqcMYorco
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

evasion trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	minerun.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3976	minerun.exe
3976	minerun.exe
3976	minerun.exe
3976	minerun.exe

C:\Users\Admin\AppData\Local\Temp\minerun.exe
"C:\Users\Admin\AppData\Local\Temp\minerun.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of SetWindowsHookEx
PID:3976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads