Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
20-05-2024 18:13
General
-
Target
MatrixHubUpdate.exe
-
Size
6.2MB
-
MD5
49bc62c05c69ae9b37d53f251392cb74
-
SHA1
e3e98bcb2490bf1a9c08004b1a9d9291bf552185
-
SHA256
55b235e7fb7111be8c170e5e24415bf2be34dd4508706ef389653e9f430f25a7
-
SHA512
7ebe22c621cc3ef0928b19087d4247bf8633b87e21863b17aab056dfa43dfa6874d7723f4857e0d010a8d91a2ab923326edfac31b61125680985bba0ff3d2108
-
SSDEEP
196608:xrlSqd1qsbyqLD0/42IpH8FnofA4Ra0b:xxSqXqiyqP0AvH863Ra0b
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 22 IoCs
-
Suspicious use of AdjustPrivilegeToken 15 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MatrixHubUpdate.exe"C:\Users\Admin\AppData\Local\Temp\MatrixHubUpdate.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\MatrixHubUpdate.exeC:\Users\Admin\AppData\Local\Temp\MatrixHubUpdate.exe2⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
4KB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
4KB
-
Filesize
13.7MB
-
Filesize
13.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
13.7MB
-
Filesize
13.7MB