Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
20-02-2024 11:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fluxus V7.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fluxus V7.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
Fluxus V7.exe
-
Size
3.9MB
-
MD5
b4f9cbca656fd34c4dbb1d706a7f1ad3
-
SHA1
2b95d88a80ccb619b581c420f7435c660cfbb28e
-
SHA256
1e022d3886700317e5c41977de8fd595db5fbb3529164048ed09ee7efdb5711d
-
SHA512
5ed86eaf8ae42d9a8f0dca9776e25b3c2232434b32088df7feaa8149886594f1d4b1e37c597597eacebdb4082e0263441a6b78def5eef2ad610a6875c28fe969
-
SSDEEP
49152:UgLIR9JyCns59qfuce05XlWycazyClY1YH8PnGpv80tbvvqVUcH:UgLIRfyC7egWJa3lY1U82kmvvoUc
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2724 2264 WerFault.exe 27 -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2264 Fluxus V7.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2264 wrote to memory of 2724 2264 Fluxus V7.exe 28 PID 2264 wrote to memory of 2724 2264 Fluxus V7.exe 28 PID 2264 wrote to memory of 2724 2264 Fluxus V7.exe 28 PID 2264 wrote to memory of 2724 2264 Fluxus V7.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fluxus V7.exe"C:\Users\Admin\AppData\Local\Temp\Fluxus V7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2264 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2264 -s 11642⤵
- Program crash
PID:2724
-