Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
-
submitted
31-07-2024 17:45
General
-
Target
Plugins/HVNCMemory.dll
-
Size
39KB
-
MD5
065f0830d1e36f8f44702b0f567082e8
-
SHA1
724c33558fcc8ecd86ee56335e8f6eb5bfeac0db
-
SHA256
285b462e3cd4a5b207315ad33ee6965a8b98ca58abb8d16882e4bc2d758ff1a4
-
SHA512
bac0148e1b78a8fde242697bff1bbe10a18ffab85fdced062de3dc5017cd77f0d54d8096e273523b8a3910fe17fac111724acffa5bec30e4d81b7b3bd312d545
-
SSDEEP
768:EofXMCBlQ6Kms0n6GE30IU1YKtq9oQog1zq/xPP7:EyXTa6hEZU1YKwo8Uj
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\HVNCMemory.dll,#11⤵
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Desktop\RevokeRequest.docx" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
345B
MD5d395057b80b00a82f0ed4b1566fe1844
SHA179d9775eeae246c7928d5ed4699952a791d3908a
SHA256dd60a86a65609e921d9ebf2d223e4ffb6127e41dac4ddb35b1440c9acd14b899
SHA51296e7c74d45694d44774d806c8abb8762dea35e56dde0a9f1bb37479ad266a9c227d55bc0731809e91dd08e0ba146dab07bc43fe40f0bf0f83353848d7f148d9c
-
Filesize
3KB
MD5e54ef87c11a535633f4e410e40afccbe
SHA153eceed3b31e2cc55ab37ac6a46482f754e796d7
SHA256d192b5128da6209629631c7ce0c402aa0a4db13857929ca82dc825009af8347c
SHA512948de1776d19551c8b6ef88374b5c756382fa7469bc9a7bb80295803168d2536973026febcdb292ed561954ba720847de4f9a91bbe2990722cdf8fee456c5e01
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB