Analysis
-
max time kernel
196s -
max time network
197s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
08-06-2024 21:39
Behavioral task
behavioral1
Sample
Silence Login.exe
Resource
win10-20240404-en
2 signatures
150 seconds
General
-
Target
Silence Login.exe
-
Size
28KB
-
MD5
b7b782ba061b6fa0cdbac41272472e42
-
SHA1
7a4dd5691bce965d9bdf0970702669e0ab7ecd37
-
SHA256
9d423777d0bf152acf13f6017af18b64462abd6f00aa7b21fac0b0270165383b
-
SHA512
b522a3de9b0dc497ac35c456f092d22d25d328286075324c4d104fc63c00cad7cc449c78fb8bdc7c3a8c9dc60150377198bdbfe67236ed3fd86511840598027c
-
SSDEEP
768:zrYLWNcUMS+dD7U81oSybVJZSqKVBCtYcFwVc6K:PsScUM1dXU2oSCVyzVBuwVcl
Score
7/10
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
Processes:
resource yara_rule behavioral1/memory/3380-1-0x00000000004C0000-0x00000000004CC000-memory.dmp agile_net -
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5016 3380 WerFault.exe Silence Login.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3380-0-0x00000000737DE000-0x00000000737DF000-memory.dmpFilesize
4KB
-
memory/3380-1-0x00000000004C0000-0x00000000004CC000-memory.dmpFilesize
48KB
-
memory/3380-2-0x00000000737D0000-0x0000000073EBE000-memory.dmpFilesize
6.9MB
-
memory/3380-3-0x00000000737D0000-0x0000000073EBE000-memory.dmpFilesize
6.9MB