Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-04-2024 14:30
General
-
Target
dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469.exe
-
Size
18.4MB
-
MD5
ddb1f970371fa32faae61fc5b8423d4b
-
SHA1
130baec325e6ae41517404e76f911f071f613567
-
SHA256
dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469
-
SHA512
81fa95ca23bd5d662fd4f82292d157de2e7e42f7e24906cd3e844a487079bdf736c3f5180bbd9b3267dafb83688138b1ad3f6785ae7041055d441dacaa828ad0
-
SSDEEP
196608:8J68/wqKgDImYikiBIQq7qEJsv6tWKFdu9CS:8U8wqVImvpqtJsv6tWKFdu9CS
Score
10/10
Malware Config
Signatures
-
Detected MagicRAT payload 14 IoCs
-
magicrat
MagicRAT is a remote access trojan developed and operated by the Lazarus APT group.
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469.exe"C:\Users\Admin\AppData\Local\Temp\dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB
-
Filesize
18.5MB