Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
10/06/2024, 11:58
General
-
Target
VirusShare_0a13a956e4b398aac91c736715e24030.exe
-
Size
104KB
-
MD5
0a13a956e4b398aac91c736715e24030
-
SHA1
26910750d7856797555b97f0733d073094c3c6d3
-
SHA256
24b799dfe6978403981bca2ce5211b452b3b554213e9a7200cb33609111d2274
-
SHA512
b350eae3eb66fd5a9a9ede40285287e30b4683333a4d81e9e179c946c93afd5d96d4111f990cea3f1b5b02b9bfbd6c148995a039560f3b12f8160552dcfece5d
-
SSDEEP
3072:MDjabtcLayLXD6riZmW4NaBZdZP+gnza:Myb4KNaBZWr
Score
10/10
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: MapViewOfSection 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VirusShare_0a13a956e4b398aac91c736715e24030.exe"C:\Users\Admin\AppData\Local\Temp\VirusShare_0a13a956e4b398aac91c736715e24030.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: MapViewOfSection
-
C:\Windows\syswow64\svchost.exe"C:\Windows\syswow64\svchost.exe"1⤵
- Modifies WinLogon for persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
104KB
-
Filesize
104KB
-
Filesize
104KB
-
Filesize
4KB
-
Filesize
104KB
-
Filesize
1.7MB
-
Filesize
28KB
-
Filesize
1.7MB