Analysis
-
max time kernel
57s -
max time network
40s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
11/07/2024, 19:11
General
-
Target
Fluxus/Fluxus V7.exe
-
Size
3.9MB
-
MD5
dd42023c04d18afd575fdc92dcdad9f2
-
SHA1
6c85bff0d7ae8842244dc56c02671a6967f607e2
-
SHA256
f619533125b312e95c2ebb5c1d72a4ddc7292476ec5c72ebd43f4a28a4aacef0
-
SHA512
4b6ec5a6ea246a15867ef05dea8261af4ae58b10a7fc2783fcf6759d0a69e43df956dc7264c72abe51c9bdd8b796e787aac68831931d63751bcf3491d374d235
-
SSDEEP
49152:kgLIR9JyCns59qfuce05XlWyc4zyClY1YH8PnGpv80tbvvqVUc:kgLIRfyC7egWJ43lY1U82kmvvoUc
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus V7.exe"C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus V7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\verclsid.exe"C:\Windows\system32\verclsid.exe" /S /C {0B2C9183-C9FA-4C53-AE21-C900B0C39965} /I {0C733A8A-2A1C-11CE-ADE5-00AA0044773D} /X 0x4011⤵
-
C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus V7.exe"C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus V7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus\Fluxus V7.exe"C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus\Fluxus V7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4.0MB
-
Filesize
6.9MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
4.0MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
2.8MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB