Overview

overview

9

Static

static

7

hacked cli...et.exe

windows10-1703-x64

7

hacked cli...mi.exe

windows10-1703-x64

1

hacked cli...te.exe

windows10-1703-x64

1

hacked cli...v2.exe

windows10-1703-x64

7

hacked cli...sy.exe

windows10-1703-x64

6

hacked cli...ic.exe

windows10-1703-x64

1

hacked cli...ea.exe

windows10-1703-x64

1

hacked cli...id.exe

windows10-1703-x64

1

hacked cli...on.exe

windows10-1703-x64

9

hacked cli...ra.exe

windows10-1703-x64

9

hacked cli...ga.exe

windows10-1703-x64

1

hacked cli...in.exe

windows10-1703-x64

1

Analysis

  • max time kernel
    26s
  • max time network
    17s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    01-05-2024 00:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    hacked client (rats) LMAO/vega.exe

  • Size

    599KB

  • MD5

    284849a2131da7c109cb496b388bd3ac

  • SHA1

    9b21005a0bb149ba8222ed5e53dbd3cf312ae404

  • SHA256

    6cfe6fac4c62d54e6ed35a12607c561beced186069801b20e6eebede85940fa0

  • SHA512

    3926df84b6bb57286198dda09461e2e1ced230a7215f5ed0ae4a1a6a2d394e57e4ef41a58b2cc63845f8328360a49af327afa8b3157b1c3ab7c14659b5962910

  • SSDEEP

    12288:H7Ruo1chws0+PNY9G/HyN4OLWP0e6RUFDTv4qJMiKalnQ3S1pc8N/:H78oA0SNYgaN4OYFD7Mi5nv1r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\vega.exe
    "C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\vega.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    PID:4184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\hacked client (rats) LMAO\imgui.ini
    Filesize

    332B

    MD5

    e4bd27a557da2a4d1066ca30ac0fd0e5

    SHA1

    e42bb9d4d3015c1dd4dbbbaa657f99aacdf53e8e

    SHA256

    59e72dbf178acc360a942442472b04f3b1533b0adf29e52ac980b01f47ec0fb4

    SHA512

    8f2a037d959690a720820422d04e34ff8a3231e4ad2dd2b1eb61aafa5e06bef06ca9a417d107d48e62f0d3d3184711753bda77609036a51750a44ef30675ba06

    Download Submit