Analysis
-
max time kernel
145s -
max time network
167s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
19-07-2024 22:57
General
-
Target
AK.xolotl.v1.3.13502/AK.xolotl.v1.3.13502/ak-xolotl.exe
-
Size
651KB
-
MD5
91516651cac9d478be48acde50e454b1
-
SHA1
5cfab6c4e0b3df2255bf73c72e8d4e3ee6aa8648
-
SHA256
01910e9e1cb086e5e40c9815479c41cf5c25ad944d9666d9e3b4dbf5b2e29a13
-
SHA512
0802c57ca610b54b9fbb66b2ed923f2658d827d5842f4498d2ace5e98619f9c1f562a6a6c40b60af94f2c3b6041f62d11b96d58e3005433fb30e580a27adc3b4
-
SSDEEP
3072:PQJ/VdFgIW9mYucJ/OD8JlsI9FTIK8dRjMkjCjCoKEU2A1d28a:8/7FG9mpcJ/OD8sKwopf
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AK.xolotl.v1.3.13502\AK.xolotl.v1.3.13502\ak-xolotl.exe"C:\Users\Admin\AppData\Local\Temp\AK.xolotl.v1.3.13502\AK.xolotl.v1.3.13502\ak-xolotl.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\AK.xolotl.v1.3.13502\AK.xolotl.v1.3.13502\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\AK.xolotl.v1.3.13502\AK.xolotl.v1.3.13502\UnityCrashHandler64.exe" --attach 2508 10526722⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2508-8-0x000007FEBDF30000-0x000007FEBDF40000-memory.dmpFilesize
64KB
-
memory/2508-13-0x000007FEBDF30000-0x000007FEBDF40000-memory.dmpFilesize
64KB
-
memory/2508-16-0x000007FEBDF30000-0x000007FEBDF40000-memory.dmpFilesize
64KB
-
memory/2508-18-0x0000000065250000-0x0000000065260000-memory.dmpFilesize
64KB
-
memory/2508-21-0x000007FEBDF30000-0x000007FEBDF40000-memory.dmpFilesize
64KB
-
memory/2508-38-0x000007FFFFEA0000-0x000007FFFFEB0000-memory.dmpFilesize
64KB