Analysis
-
max time kernel
150s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10-06-2024 05:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XAU.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
XAU.exe
-
Size
9.5MB
-
MD5
99d58853a73b223f27f2976376a1469a
-
SHA1
f98d467976de9209db30be2c4fb3fde96544e026
-
SHA256
ce23c8284673debf5214dde212dbd537654ef95ee0cb6e28a6e9864dd6602e14
-
SHA512
ecf0892e884ed36a735be007888f03c1fcb82b143dad5430177cd4ac9747f4a5840538206473a568537c08b36777e68b2fc51977a9818ae2a82591d2240a6afd
-
SSDEEP
98304:bI9vTZrgPNZyz5mOYoXyI/PLCvSmaRT+BcPNRZ5h5AHDfyRr8l5N:KTUN4z5mOzyQNNRZo
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
flow ioc 15 raw.githubusercontent.com 16 raw.githubusercontent.com 19 raw.githubusercontent.com 23 raw.githubusercontent.com -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe 4612 XAU.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4612 XAU.exe