Analysis
-
max time kernel
140s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11-09-2024 22:07
General
-
Target
flare.exe
-
Size
2.3MB
-
MD5
db8808af7f567305eced24c06f4cfa8f
-
SHA1
b04f241678b1882652a6291ee2bf87385816821a
-
SHA256
326c0150c467c0da38d315465ed4aaa735fcc541bea732f897819e9a199a8eab
-
SHA512
fa707c08c10805118b31b218f82fd5d00bccc12c443b40329fdfb022bbc3d9f3a7fead23499e093941255972b066137eeb43d529583d28b83747c1a7cfdaf6c7
-
SSDEEP
49152:WYsdvltyb4DEbIrSdiCP9N4wJAFUYur1A2skTPcsvfx+R9O:UI8BGThNDp+R9O
Malware Config
Signatures
-
Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\flare.exe"C:\Users\Admin\AppData\Local\Temp\flare.exe"1⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x51c 0x5181⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
886B
MD5f79705ef83e45f95853d014cefed2230
SHA1ae2e1b8def86e5c5489b581c80d9648438916175
SHA256cbdf6c27db3ad10e6eca95b83d4164c2dcbfd8bd2ccc3a073b3c01ad1483cb6f
SHA5129c11b81c929c86df2d7b13f1c9ce82c0dbf68e1815f098193cdd87efc5385cd5f01cc277ccc7aad65f8dab1bc8dc0d99ad069f9efe19ed4ab1b39606cedabb6d
-
Filesize
1KB
MD505fef1f8000c2a40c59caf4b52a767ea
SHA1d9125d8f267dd77a3b3ecc634f353c98f88b08c3
SHA256531dad2c0d740dd5732bae50867cfb5e3bc0c9b2645810af8fe59f995134da27
SHA51276d99d51d8f1eeecdd4fe7a7429b7e32f70aec94379c6f517646c42f37ab6419f188a3985d1abb3c7d579ee06e651e24c0b76727fde9943e30c23bddebfe0fa6
-
Filesize
1KB
MD5ff1a15f77a1d7a933bb0524457128a05
SHA1a2ce107fc5df9d4529d19b7d8dcce03fed3298c2
SHA25637871fd9dc43358cacd86200eb28d4c91e76401e673a12478f3087af46cc4cd8
SHA5127f6a52735ad6cde2e6ebd21565c692b35a7d7b4f51f32f22ff12fe27a4a8eb6dcc8ffb05778844355d27949d5f95c83d9c1692528bfa1efd1c6cf80365b0cc4f
-
Filesize
2KB
MD53a611c0ca8d7414cce72ff07dfd616e3
SHA1bdb8d87058ed1fca0d22a7a7a2ca975615749970
SHA256f70a478becf87f42181233a306c50bc13bff7060ef62b9f10adb24f8acc38c6a
SHA5126475ac687346194f42e28cfcbb48cef1fa8fcedb4b55591057b4a606bea6ded489ca64fea3f124e98aac7d3770add8399cecd967dfb49000e60ebb948209f12c
-
Filesize
224B
MD5973c72615d4e3f8d3ca09bb4fe95ec5f
SHA153a08259014fea37afb43042f8ea8f4aa15a83e6
SHA256950a1228f072b18401fe5b72255a22b49c13a933286cee525c01cf6e4571b3b7
SHA512c7111fe4080882e7ba996138bc8fea7a29b24e383a6ee993049fbc782d5321f2ed07c0881ce5cde08ca7438c2ca8fda71eaf3c0fd69a43d5152e12ff6a954f5f
-
Filesize
2KB
MD561cfde170a72dc0fb89a3d03fb820aa7
SHA1dd4a0aa1967a0d5eea1a44dc0fc2aa2854d4a216
SHA2565d7ab200343b03a0c5617976a4ae5bb9fd35351d9007a9028c73102c1653799b
SHA512878ceddba1745ea6705918a979c5a07f1b3ca5cff54e47318c1a16ff3a7db27a6c6e36bfe1cedaafab89ac5155dc56497280dc1378e222e0480b0eeaa6a8aa9c
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
180KB
-
Filesize
424KB
-
Filesize
1.1MB
-
Filesize
412KB
-
Filesize
1.3MB
-
Filesize
176KB
-
Filesize
160KB
-
Filesize
124KB
-
Filesize
840KB
-
Filesize
772KB
-
Filesize
144KB
-
Filesize
816KB
-
Filesize
1.9MB
-
Filesize
444KB
-
Filesize
92KB
-
Filesize
76KB
-
Filesize
100KB
-
Filesize
664KB
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
136KB
-
Filesize
1.1MB
-
Filesize
760KB
-
Filesize
3.2MB
-
Filesize
80KB
-
Filesize
448KB
-
Filesize
556KB
-
Filesize
268KB
-
Filesize
764KB
-
Filesize
104KB
-
Filesize
328KB
-
Filesize
152KB
-
Filesize
2.0MB
-
Filesize
1.9MB