Analysis
-
max time kernel
440s -
max time network
1165s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
29-02-2024 00:52
General
-
Target
MADARA.exe
-
Size
699KB
-
MD5
6f6809f59effeb683bf84b15dcf1c2c1
-
SHA1
100ba07752ecce8c98b980de2d6848445f058a0c
-
SHA256
c1bc0af0c55281609ceb3d51ca277ccc703b7b9acaef219a8dd22933c0ad3ff0
-
SHA512
ba2fd5746475398d59bfec006e036feaf4ffaf73d17698c02b16766a1e85bb590eb02f9f9a80cd04e54f828de2b32c18b3fe2ba4dbff634ddaba1f7f066bc56f
-
SSDEEP
12288:Kh1Lk70TnvjcHW06BoF6NobATJlLY8/zm58Iz/fFOeDDtZINWXKSaQA:uk70Trcd46bClh8z/9VDfc0KfQA
Score
7/10
Malware Config
Signatures
-
.NET Reactor proctector 35 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MADARA.exe"C:\Users\Admin\AppData\Local\Temp\MADARA.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
816KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
5.6MB
-
Filesize
800KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
64KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
784KB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB