Analysis
- max time kernel
149s - max time network
54s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
14/06/2024, 09:26
General
- Target [RHX]-GameLauncher.exe
- Size 2.9MB
- Sample240614-lebvfsvanc
- SHA256 cd99a001384d80999040cd6e6f56f4d506af42843f26ac1062ac4a33c7ab6a85
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\[RHX]-GameLauncher.exe"C:\Users\Admin\AppData\Local\Temp\[RHX]-GameLauncher.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
setting.ini
memory/4472-26-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-39-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-1-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-8-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-13-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-18-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-5-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-31-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-21-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-34-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-0-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-42-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-47-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-52-0x0000000000400000-0x0000000000DCD000-memory.dmp
memory/4472-55-0x0000000000400000-0x0000000000DCD000-memory.dmp