Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 19:40

General

  • Target

    xEngine.exe

  • Size

    1.3MB

  • MD5

    041bb0adc2bdb383d56c3c969228689a

  • SHA1

    707a9d6ac0bec0b1ef8617bea2d5e88ecdd01b86

  • SHA256

    520703ed02b0b7fe51dbf2e930b6ef33c5e4b65108810ebf2ea3cd27f31ca6b4

  • SHA512

    238474bc22368c049677d41565fbe73c16602dd7e920045a0113da99f7e3ffa81f0d32fd2b5d5b8787fcdbcfafbdcea3543ef5a714565bd5aa59b5af06818b09

  • SSDEEP

    24576:jj4hE854lTcjrZxuR5HBrZUlI9sF9ngJ4D+sLBMeXWyATL7zXXTX12Oe:jEhEBlTIZxgdgosF9gJUdMeXWyqLXTl6

Score
1/10

Malware Config

Signatures

  • Modifies registry class 9 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\xEngine.exe
    "C:\Users\Admin\AppData\Local\Temp\xEngine.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\Documents\VeryFire_Store\res.zab

    Filesize

    867KB

    MD5

    06e98cfe66d5e323aeb94a393b41492e

    SHA1

    23c1066859e0055bf7efd02eb9911819c0e92e77

    SHA256

    63eb9274f807fe9e53ed18cba1519a8487d285c3b902477c49266ddff4ada0d1

    SHA512

    ab63ce7b638cb87b8d6aa23e6fdd2da124874a6efd4a103377c9c010d3029f39bbc8ab50e8780deab64e2f50fc5fdf36de99cfccaff52580e79cf5357906846b