Overview
overview
7Static
static
3incognito_3.zip
windows11-21h2-x64
1incognito/...st.txt
windows11-21h2-x64
3incognito/...s.json
windows11-21h2-x64
3incognito/...au.dll
windows11-21h2-x64
1incognito/...e.json
windows11-21h2-x64
3incognito/...st.lua
windows11-21h2-x64
3incognito/...it.exe
windows11-21h2-x64
7incognito/...le.txt
windows11-21h2-x64
3incognito/...et.txt
windows11-21h2-x64
3incognito/...le.txt
windows11-21h2-x64
3incognito/..._1.txt
windows11-21h2-x64
3incognito/..._2.txt
windows11-21h2-x64
3incognito/...le.txt
windows11-21h2-x64
3incognito/...le.txt
windows11-21h2-x64
3incognito/...tefile
windows11-21h2-x64
1incognito/...le.txt
windows11-21h2-x64
3incognito/..._FE.iy
windows11-21h2-x64
3incognito/...st.txt
windows11-21h2-x64
3Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system -
submitted
31/05/2024, 05:34
Static task
static1
Behavioral task
behavioral1
Sample
incognito_3.zip
Resource
win11-20240426-en
Behavioral task
behavioral2
Sample
incognito/autoexecute/test.txt
Resource
win11-20240426-en
Behavioral task
behavioral3
Sample
incognito/bin/api-docs.json
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
incognito/bin/incognito-luau.dll
Resource
win11-20240419-en
Behavioral task
behavioral5
Sample
incognito/bin/save.json
Resource
win11-20240508-en
Behavioral task
behavioral6
Sample
incognito/scripts/test.lua
Resource
win11-20240426-en
Behavioral task
behavioral7
Sample
incognito/thegreatestexploit.exe
Resource
win11-20240419-en
Behavioral task
behavioral8
Sample
incognito/workspace/.tests/appendfile.txt
Resource
win11-20240426-en
Behavioral task
behavioral9
Sample
incognito/workspace/.tests/getcustomasset.txt
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
incognito/workspace/.tests/isfile.txt
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
incognito/workspace/.tests/listfiles/test_1.txt
Resource
win11-20240508-en
Behavioral task
behavioral12
Sample
incognito/workspace/.tests/listfiles/test_2.txt
Resource
win11-20240426-en
Behavioral task
behavioral13
Sample
incognito/workspace/.tests/loadfile.txt
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
incognito/workspace/.tests/readfile.txt
Resource
win11-20240426-en
Behavioral task
behavioral15
Sample
incognito/workspace/.tests/writefile
Resource
win11-20240508-en
Behavioral task
behavioral16
Sample
incognito/workspace/.tests/writefile.txt
Resource
win11-20240426-en
Behavioral task
behavioral17
Sample
incognito/workspace/IY_FE.iy
Resource
win11-20240426-en
Behavioral task
behavioral18
Sample
incognito/workspace/test.txt
Resource
win11-20240508-en
General
-
Target
incognito_3.zip
-
Size
18.7MB
-
MD5
cb5b6cb73e8a9562dea9abcd1dd33a7c
-
SHA1
fa043262abec7938fe85c693ed33c2fc612798d2
-
SHA256
3210cb786e13add6f0be5a7b8754e014dc12543c0a1acf25b09ef1ee2b8c34f9
-
SHA512
6de74ea842ffce04baff2e5a6e5ddb1aa134017f222764088ff349223347594ac01e3ee708e034fee31d4d3109f9b4d1cdc442cd5e66163cf83d2245f028323d
-
SSDEEP
393216:luD3A7A/mLfnrCi/uyqISF9MkF4QM+SwCurPi+V+tRJjLb1YfSP:MDqLNuyqISY/QMf46+Utf/bF
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\incognito_3.zip1⤵PID:4604
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2204