Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05-05-2024 05:44
General
-
Target
Deceit ЧИТ/GH Injector - x64.exe
-
Size
880KB
-
MD5
4c5663d6ec18f7d05fe4ecb100c020aa
-
SHA1
193c6eccd581e89ea2d85daccb356059e340e89a
-
SHA256
d99c2d6662e6db724442451c5e83de94a2fb0cd624bb26654e9ef8e3e9df38f6
-
SHA512
ec938a227aee3bfb92edcc6c20a35faa8f5a04efa25b65dec67b58606e6c199357a6eefe4e9a131e0adea52e612ac537ccb42a664abe8c9ada8108f7e717130a
-
SSDEEP
24576:mqoIM4mh58kGivEpxMYa4nYzSfKhI9WM+n7:m0Hm3RFYahuicJ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Deceit ЧИТ\GH Injector - x64.exe"C:\Users\Admin\AppData\Local\Temp\Deceit ЧИТ\GH Injector - x64.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
1.9MB