Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20-04-2024 16:55
General
-
Target
xtrap/XTrap.exe
-
Size
413KB
-
MD5
0bbd9ee915941893c93dc7af76de4371
-
SHA1
432261499301f39be032a9858ece42025e0577a1
-
SHA256
5d7071327541d1a9cc875f82f790661ecea69cbdd46bd509d6bdf1bd45932da8
-
SHA512
61fdb05fa6d9bf401b443dd4c14654eca4556d015e273977a9e02be0591b5dbf4d93c32d2cb4c54ecdca012ecb2dcdb0e8e28693f58ed38152c200b3a61e4ec0
-
SSDEEP
6144:BqbrJ7rXrnfufHi1cNwPLvoqg0R2VhPefm0To7ugQ7O3wjHd4LA+byrVLyEjk0lW:BqRrXrn6Hi1c2obY78iHd4s+b2IEl3G
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xtrap\XTrap.exe"C:\Users\Admin\AppData\Local\Temp\xtrap\XTrap.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1952-0-0x0000000000400000-0x00000000004CF000-memory.dmpFilesize
828KB
-
memory/1952-3-0x00000000002D0000-0x00000000002D1000-memory.dmpFilesize
4KB
-
memory/1952-2-0x00000000002E0000-0x00000000002E1000-memory.dmpFilesize
4KB
-
memory/1952-1-0x0000000000390000-0x00000000003E0000-memory.dmpFilesize
320KB
-
memory/1952-7-0x0000000002AD0000-0x0000000002AD1000-memory.dmpFilesize
4KB
-
memory/1952-6-0x0000000002A70000-0x0000000002A76000-memory.dmpFilesize
24KB
-
memory/1952-5-0x0000000000310000-0x0000000000311000-memory.dmpFilesize
4KB
-
memory/1952-4-0x0000000000400000-0x00000000004CF000-memory.dmpFilesize
828KB