Analysis

  • max time kernel
    133s
  • max time network
    138s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    25/02/2024, 08:17

General

  • Target

    Nyin spoofer.exe

  • Size

    109KB

  • MD5

    b62228139d57f8e44c39c98f52413b75

  • SHA1

    70e031bea19054d6f9a7b4aedfdc244a9824beb4

  • SHA256

    9460ad1489566cbcf1edf93a6655a6fc3a94815de04c87ee139258d83579a5f2

  • SHA512

    78a65ced5b5f2b6e9c9d47fbebeda77d3f66cb5deff69b337d2e0744bd9deba10d83c53f3663afc4e420f0eda9dde0a66a141cf7a3f5bdd7d30ae4692268c9d0

  • SSDEEP

    768:NHFxOG2x4feq3ovCyyDzHGz30NKFPo1r/Bm8jfrtwt5Ay9:RFxOGI4Wq4vCpDGzFPo1r/Bm8ty5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Nyin spoofer.exe
    "C:\Users\Admin\AppData\Local\Temp\Nyin spoofer.exe"
    1⤵
      PID:1336
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:512

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1336-0-0x00007FF604B30000-0x00007FF604B61000-memory.dmp

              Filesize

              196KB