Analysis
-
max time kernel
49s -
max time network
51s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
09-09-2024 22:12
General
-
Target
USB Raptor.exe
-
Size
12.3MB
-
MD5
2f582879a24a32859461691460b0c773
-
SHA1
851169ef88e149bf61e92e03467b79c8c756ef94
-
SHA256
6845f9f59a3f8f6570a762582eb6f44c82423fb285fccbb91012a7e4e4f03668
-
SHA512
92f53f1c8d7b385823a6b73e052cb42d51ba2533e783e463099752326273392cb8a0fb3a676f27364e05fd89d03c4bf17981d1f9c729218d25964cf8f1275058
-
SSDEEP
393216:WEedjLTF/vvv0veMcye6vweeRG6CHPjbc/rgc3l+qJgkJvf:WEeRZ8e6vweexCvjbcBJg+
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 5 IoCs
-
Suspicious use of SendNotifyMessage 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\USB Raptor.exe"C:\Users\Admin\AppData\Local\Temp\USB Raptor.exe"1⤵
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
12.3MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB