Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    08-06-2024 21:40

General

  • Target

    Kiwi X/finj.exe

  • Size

    6.2MB

  • MD5

    bb8df28332e308cf40dfd2df00161f34

  • SHA1

    888f2213a68c61cc635fbfbddab694f517b0c315

  • SHA256

    237ece227d239ca11f090e1ddde4ee8f68ef5f7aaf5fcb0ecba14424ea276d76

  • SHA512

    09d67c94ed331f2383627db1317f5480a0ef9fc8809cb075f9e603b7a653a4931725fd32776492ee4aa163035912535934a310aa2f8eb8790e4736555c28f4cc

  • SSDEEP

    98304:2AONPewHLRESPB2KC6Z36S0GQpZLff+RaDDyw3W92wUpIU9Yj86eL1DXSJBN2lAB:CJXHLqU2tkw+wRG92wURDovpR9sA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Kiwi X\finj.exe
    "C:\Users\Admin\AppData\Local\Temp\Kiwi X\finj.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3940
  • C:\Windows\SysWOW64\mshta.exe
    "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\UnpublishWait.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
    1⤵
      PID:5112

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3940-2-0x0000000000CCA000-0x0000000001025000-memory.dmp

      Filesize

      3.4MB

    • memory/3940-0-0x0000000000CB0000-0x0000000000CB1000-memory.dmp

      Filesize

      4KB

    • memory/3940-1-0x0000000000CC0000-0x0000000001658000-memory.dmp

      Filesize

      9.6MB

    • memory/3940-4-0x0000000000CC0000-0x0000000001658000-memory.dmp

      Filesize

      9.6MB

    • memory/3940-5-0x0000000000CC0000-0x0000000001658000-memory.dmp

      Filesize

      9.6MB

    • memory/3940-6-0x0000000000CCA000-0x0000000001025000-memory.dmp

      Filesize

      3.4MB