Analysis
-
max time kernel
1377s -
max time network
1167s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
28-05-2024 13:13
General
-
Target
WuWaRuV2.exe
-
Size
9.4MB
-
MD5
d49304afc157354093b9028ef00357a9
-
SHA1
eb9a6b7a466cd95b4c773a6ca9c04f5547517083
-
SHA256
e1de8d77e6dd9bd1cc7b8dfc1f9de0b1d08ca1575da949cc8e4e69c47a5a0faa
-
SHA512
af5b4a8f80bea6e67eae4da557742d12dee3419e8da5ecca6f0c3a11dc28bf630ad9f35a3174f369e7fb1ad982ee5952d207b7617c1c8035d8c1c9de2fe47219
-
SSDEEP
196608:RzKRdmVL81+APaHB+NNM/rjvEDTOuK6m0VN8iNISSkSIWpWFnp:ZXJwI/rjM5Xm0XWkSDpY
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WuWaRuV2.exe"C:\Users\Admin\AppData\Local\Temp\WuWaRuV2.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD56f2fdecc48e7d72ca1eb7f17a97e59ad
SHA1fcbc8c4403e5c8194ee69158d7e70ee7dbd4c056
SHA25670e48ef5c14766f3601c97451b47859fddcbe7f237e1c5200cea8e7a7609d809
SHA512fea98a3d6fff1497551dc6583dd92798dcac764070a350fd381e856105a6411c94effd4b189b7a32608ff610422b8dbd6d93393c5da99ee66d4569d45191dc8b
-
Filesize
712KB
-
Filesize
7.7MB
-
Filesize
304KB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
424KB
-
Filesize
7.7MB
-
Filesize
640KB
-
Filesize
40KB
-
Filesize
5.6MB
-
Filesize
9.5MB
-
Filesize
3.3MB
-
Filesize
152KB
-
Filesize
32KB
-
Filesize
88KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
32KB
-
Filesize
120KB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
4KB