Analysis
-
max time kernel
141s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
23-05-2024 01:01
General
-
Target
WBNS X FNF V1/WBNS X FNF.exe
-
Size
28.4MB
-
MD5
6363f1655dea5d8e05fb45f47c3d1918
-
SHA1
206e917a0a200122e9c05e72abf7e3fdedd0b5f2
-
SHA256
054ce19254564fb7eb7576c406d236c69accf3241bb6345ba99f81a427054f3a
-
SHA512
59036e75783dcac73c96f647f81a4840fd4272b21432a077153e4ddea29cc2c6157af023977e09bdcf8c1658217daafed368e7a8deeef52dfd753950ff412b45
-
SSDEEP
196608:aFkygtjTC0JkKMV6/GiuHUbOkWSBn7PgPyNgNwxtnNULQNv81mU:ekymje0JXRgHUbtn0PyyWtnNULQJ81
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Modifies registry class 9 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WBNS X FNF V1\WBNS X FNF.exe"C:\Users\Admin\AppData\Local\Temp\WBNS X FNF V1\WBNS X FNF.exe"1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x338 0x4501⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
-
Filesize
208KB