Analysis
-
max time kernel
142s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
13/07/2024, 15:59
General
-
Target
Mythic_Marbles_CH.exe
-
Size
5.5MB
-
MD5
9dfb3dbd207f1ed6c769b072987eb994
-
SHA1
14bb24a7ab9d7c040f3fce88d31b9263cbeae8c2
-
SHA256
ba48b005cc9b65d71d78cad6ad797c6dc0a8a37639c2ac778e515024965c9a70
-
SHA512
6973cad973f17e84f970b020bbb7c8dbcc9fe0a8fb7a8ae214389c32b94eed7fc554bced88ab3fd18f7576e87d9566dd8fe9c943abf3e07c91eb67e8605d2aa7
-
SSDEEP
98304:pxhMfR6t3en0VgoflW1/iWTi1aJD5Sc+WwSCifbcr4bdWrFWUxP3CcXMk4LqbKRP:SfA3BVdk/vrScJDVfbMydkFnpa+bxDyJ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Mythic_Marbles_CH.exe"C:\Users\Admin\AppData\Local\Temp\Mythic_Marbles_CH.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x38c 0x3101⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
1008KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB