Overview
overview
10Static
static
7LOWKEY/Loa...ed.exe
windows7-x64
7LOWKEY/Loa...ed.exe
windows10-2004-x64
7LOWKEY/Mon...RU.exe
windows7-x64
10LOWKEY/Mon...RU.exe
windows10-2004-x64
10LOWKEY/Mon...rt.exe
windows7-x64
10LOWKEY/Mon...rt.exe
windows10-2004-x64
10LOWKEY/Wif...in.bat
windows7-x64
1LOWKEY/Wif...in.bat
windows10-2004-x64
1LOWKEY/libcurl.dll
windows7-x64
1LOWKEY/libcurl.dll
windows10-2004-x64
1LOWKEY/run...so.exe
windows7-x64
7LOWKEY/run...so.exe
windows10-2004-x64
7LOWKEY/run...st.exe
windows7-x64
7LOWKEY/run...st.exe
windows10-2004-x64
7LOWKEY/zlib1.dll
windows7-x64
1LOWKEY/zlib1.dll
windows10-2004-x64
1Analysis
- max time kernel
93s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 06:10
Behavioral task
behavioral1
Sample
LOWKEY/Loader_protected.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
LOWKEY/Loader_protected.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
LOWKEY/Monitor Spoof/CRU.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
LOWKEY/Monitor Spoof/CRU.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
LOWKEY/Monitor Spoof/restart.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
LOWKEY/Monitor Spoof/restart.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
LOWKEY/Wifi & Bluetooth disabler/Disabler_Run_Admin.bat
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
LOWKEY/Wifi & Bluetooth disabler/Disabler_Run_Admin.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
LOWKEY/libcurl.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
LOWKEY/libcurl.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
LOWKEY/run me also.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
LOWKEY/run me also.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
LOWKEY/run me first.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
LOWKEY/run me first.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
LOWKEY/zlib1.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
LOWKEY/zlib1.dll
Resource
win10v2004-20240508-en
General
- Target LOWKEY/Loader_protected.exe
- Size 5.4MB
- Sample240603-gxea3sfd84
- SHA256 84ea9e6a8a65b9d653b175b28a50da62469f07e7c5c94a0a7f81b939c3a254a5
- MD5 7294f33e7a488cd4ba10383f0a7a0d89
- SHA1 e280731d441b875d65be9010904925fbd05dac2a
- SHA512 abfafa0c7866adf45b53feea4e036c471e120502cfc29d591d5f87bc5c7251ddf9297a465efb246cc4e68d954ab1339b88e3f35516fc089faa2a9b2a60e8e806
- SSDEEP 98304:xHU+1MNuAmgEWiKsFmiSIRMOrBt3Ks7qXW7dp4vNOP2S+1m7BIESQZnBYT:xHUsjmbIDlKs7EUn4N24mVIitWT
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3548-0-0x0000000140000000-0x0000000140C7B000-memory.dmp themida