3375cbf19f872afaa64e78520e73b95e14095ad02f8a36416838395ddcce91f3

Analysis

max time kernel
4s
max time network
5s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-08-2024 02:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

h2m-revived.exe
Size

7.2MB
MD5

e50cbdcfed64dbc438b0170e901a1efe
SHA1

8993bc1deadc7670a60ecdeaf3cd5d7740dba939
SHA256

3375cbf19f872afaa64e78520e73b95e14095ad02f8a36416838395ddcce91f3
SHA512

44d21a9b34f768e9adbc096a3402ab2ca4ab0fcf984f3113d25450dd0c78cbdd712f4dd6bc1c4e1c4dab87d8b33d1cbcf54a5cb02457767c4f94977da2ef7c40
SSDEEP

98304:yjtYW8rlXVeFGxGD3u4k9sNoJm9+bBX3AtlGGoJXiir7BzN1BNN1BPak+:kYW8ZleFGwa4k9+oJm0GoJxaF

Score

8^/10

persistence

Malware Config

Signatures

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\h2m-revived.exe	h2m-revived.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\h2m-revived.exe\MaxLoaderThreads = "1"	h2m-revived.exe

C:\Users\Admin\AppData\Local\Temp\h2m-revived.exe
"C:\Users\Admin\AppData\Local\Temp\h2m-revived.exe"
1⤵
- Event Triggered Execution: Image File Execution Options Injection
PID:448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Privilege Escalation

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads