Analysis

  • max time kernel
    142s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/04/2024, 00:44

General

  • Target
    ItroublveTSC-master/bin/Binaries/RtkBtManServ.exe
  • Size 2.8MB
  • Sample240426-a3z2eage79
  • SHA256 f4fb42c8312a6002a8783e2a1ab4571eb89e92cd192b1a21e8c4582205c37312
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Nirsoft 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ItroublveTSC-master\bin\Binaries\RtkBtManServ.exe
    "C:\Users\Admin\AppData\Local\Temp\ItroublveTSC-master\bin\Binaries\RtkBtManServ.exe"
    1⤵
      PID:2496

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/2496-0-0x00000144B30E0000-0x00000144B33BA000-memory.dmp

          memory/2496-1-0x00007FF8CB8B0000-0x00007FF8CC371000-memory.dmp

          memory/2496-2-0x00000144CDAE0000-0x00000144CDE22000-memory.dmp

          memory/2496-3-0x00000144B3750000-0x00000144B3756000-memory.dmp

          memory/2496-5-0x00000144CDAD0000-0x00000144CDAE0000-memory.dmp

          memory/2496-4-0x00000144CD890000-0x00000144CD906000-memory.dmp

          memory/2496-6-0x00000144CD940000-0x00000144CD9F0000-memory.dmp

          memory/2496-37-0x00007FF8CB8B0000-0x00007FF8CC371000-memory.dmp