Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
07/09/2024, 18:35
General
-
Target
olduimatrix.exe
-
Size
1.0MB
-
MD5
66658e3fa325e09a6f4d444fcdb0f62f
-
SHA1
e99807ab807382bbd186948947a83aabb3527f86
-
SHA256
09e084dad788d42508ed8ef49a62a949a4f89ba2678e42415c3808a95bd7fa55
-
SHA512
7fc89a3fb6ab89bf76ed02a71f800284d60a4a8f1542467ab949f5c8d4608d4844eb80ec4eb38c2b839c507b9333a8d55373ef825e0cff1232d9e84e77589f8d
-
SSDEEP
24576:WWPrtwQVbhgvLjUeJaFdyDLzkKTKTwFhciVKyz2pKeOz8WAzW0A:TPrt7gfLJaFcDLVewFhciQyz2pKeHWAV
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\olduimatrix.exe"C:\Users\Admin\AppData\Local\Temp\olduimatrix.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
4KB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
1.7MB