Analysis
-
max time kernel
23s -
max time network
6s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
21-02-2024 15:31
General
-
Target
NitroxLauncher.exe
-
Size
3.5MB
-
MD5
e801cd1a9af46b219768d79f7d2a2b98
-
SHA1
a2e939298aec1770b0079284b5bc275ba9cee517
-
SHA256
9c34793ccd4cde1297ed243858b6411305201b95e86d1e99cf493a9a51b88e5c
-
SHA512
48dee9078223881716bd1360881233b6a99df3c1f6063fe69784e77243ce55e988fea1365184de69b4f1724cd59ac02d6e8deaf7fbf00eae82301122c09e71ee
-
SSDEEP
98304:fUqYeHg1UsnKLycqQYcDcwuavRfFujF0NpIl:LU18yArhvRfFujaNOl
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NitroxLauncher.exe"C:\Users\Admin\AppData\Local\Temp\NitroxLauncher.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\NitroxServer-Subnautica.exe"C:\Users\Admin\AppData\Local\Temp\NitroxServer-Subnautica.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
248KB
-
Filesize
208KB
-
Filesize
10.8MB
-
Filesize
56KB
-
Filesize
224KB
-
Filesize
64KB
-
Filesize
112KB
-
Filesize
88KB
-
Filesize
64KB
-
Filesize
744KB
-
Filesize
32KB
-
Filesize
56KB
-
Filesize
136KB
-
Filesize
3.5MB
-
Filesize
32KB
-
Filesize
152KB
-
Filesize
248KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB