Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20/05/2024, 12:27

General

  • Target

    ddvniek's Hacker Toolbox 1.2.exe

  • Size

    4.3MB

  • MD5

    eee822bbf3249d38dfe405e8e216ec54

  • SHA1

    59f1f11a5713930d1244da1b43637931a1ea3341

  • SHA256

    1372035341485a1170e26d19a93b79550e437f974d35e3d969a1bb62b18c68bf

  • SHA512

    583b68d8cef48ef4d68181c90b21321841571a7965484066292eea52930f0c97733f1041b4ff74c362528e5d261e87d729d6f5d31e6bc5813924f96974f0f974

  • SSDEEP

    49152:Yac97VAKgK314b80v0kCNrGT5O6G0oUkFD:Yaa7VAE314bCkCVZ

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ddvniek's Hacker Toolbox 1.2.exe
    "C:\Users\Admin\AppData\Local\Temp\ddvniek's Hacker Toolbox 1.2.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:232

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/232-0-0x00000000025D0000-0x00000000025D1000-memory.dmp

          Filesize

          4KB

        • memory/232-1-0x0000000000400000-0x0000000000856000-memory.dmp

          Filesize

          4.3MB

        • memory/232-2-0x0000000000400000-0x0000000000856000-memory.dmp

          Filesize

          4.3MB

        • memory/232-3-0x00000000025D0000-0x00000000025D1000-memory.dmp

          Filesize

          4KB

        • memory/232-4-0x0000000000400000-0x0000000000856000-memory.dmp

          Filesize

          4.3MB

        • memory/232-5-0x0000000000400000-0x0000000000856000-memory.dmp

          Filesize

          4.3MB

        • memory/232-6-0x0000000000400000-0x0000000000856000-memory.dmp

          Filesize

          4.3MB