Analysis
-
max time kernel
96s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11/07/2024, 19:11
General
-
Target
Fluxus/Fluxus/Fluxus V7.exe
-
Size
2.8MB
-
MD5
bb7859fbcda8f8f264a1de41673510c2
-
SHA1
089f03f7dfc88c2d14292e76de928e4a9464b3f6
-
SHA256
47d87a08e3a9cdfe2ef9c462205044ef938d0215e87c518b7627bb367e4faae9
-
SHA512
61b7e51073559dc2090d280f65f347002e0d354c33b05916871df279fd1d67778e01ffcba1cda41ed01593de0676bbc3fbb048c307b2d0e27bfa228ebed7265c
-
SSDEEP
49152:7FvJA52joYoYdnZOYoB1bAzOBC5tMqiNHw+W7SCwGpv8H:HXoYoYdnZOYovHTgBk
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus\Fluxus V7.exe"C:\Users\Admin\AppData\Local\Temp\Fluxus\Fluxus\Fluxus V7.exe"1⤵
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3048 -s 29122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3048 -ip 30481⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD57050d5ae8acfbe560fa11073fef8185d
SHA15bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b
-
Filesize
4KB
-
Filesize
2.8MB
-
Filesize
7.7MB
-
Filesize
32KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
7.7MB