Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 17:03
General
-
Target
FlowframesInstaller1.40.0.exe
-
Size
2.5MB
-
MD5
6068259c7562439a27a7d67a5fde907a
-
SHA1
559fe102d725912c24d9ea8d7c56ce0f744b015c
-
SHA256
bfabb3f049126a57aa081460f029237d12bec81ef490842441ab92d1f61f4c69
-
SHA512
80d73494df1db7d11da000c8575e89e15fd3e13758bccc8763e5f8c83e1ad793bba74e7894362b50cfcdc1215fdd8207002b60b9c356da038343b0ef026deefc
-
SSDEEP
49152:Tw1ha7mEkEOUzS65+x+rnxYr1N26UVtNsw+W7SCVdLjkuTcTB2rP0LTxmwC2b1h:Tw1ha7mEk9UzS65+x1pMR5HvdLMTALVN
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FlowframesInstaller1.40.0.exe"C:\Users\Admin\AppData\Local\Temp\FlowframesInstaller1.40.0.exe"1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Users\Admin\AppData\Local\Temp\FlowframesInstaller1.40.0.exe"C:\Users\Admin\AppData\Local\Temp\FlowframesInstaller1.40.0.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5d5634beeeb5e586d77c863b5222222ba
SHA1a5ff2fad05787aaa7a5cfb09fec022632c0d3895
SHA2565bd3c249e68ca1550acb56e69d17155265bd571dcec8c9ba356db84d992fe036
SHA51259b488c4ec0463e800e89812c09c1329468e64a1252a7338503b46121041f289a5d597805dce2977a99b71157457f57379b53754327cfc9540328a33a896b979
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
128KB
-
Filesize
528KB
-
Filesize
10.8MB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
1.7MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
480KB
-
Filesize
8KB
-
Filesize
72KB
-
Filesize
40KB
-
Filesize
2.5MB