Analysis
-
max time kernel
180s -
max time network
312s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
06-10-2024 05:29
General
-
Target
Granny - Recaptured v1.1.5/Granny - Recaptured.exe
-
Size
651KB
-
MD5
0863c693dded32a2a083abad60570ea6
-
SHA1
192d713f3afd131bb1bf5ccb0c7fa0664b884f54
-
SHA256
61abdcd4430b174599bb426a1d7d075d4a52539742a08db19e6a18adb4cc6513
-
SHA512
b2fd21dbc06a297d6a6a85d85f99c0ef0ce7e50576eaf71a717acf12d8300b619e456895e742f9d835bf40c27afe7fd60b9106b5255409ed48e7d978d2e4399b
-
SSDEEP
6144:m/7FG9mpcJ/OD8qir4ZDJq+aFcNUD1PEvXqYrik6EB7/Gg0bjg30rVjWZCuJK3gT:m/744aOD824cC5PEP96Ei030l9iTMA
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Granny - Recaptured v1.1.5\Granny - Recaptured.exe"C:\Users\Admin\AppData\Local\Temp\Granny - Recaptured v1.1.5\Granny - Recaptured.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Granny - Recaptured v1.1.5\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\Granny - Recaptured v1.1.5\UnityCrashHandler64.exe" --attach 2996 23808070819842⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Granny - Recaptured v1.1.5\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\Granny - Recaptured v1.1.5\UnityCrashHandler64.exe" "2996" "2380807081984"3⤵
-
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004C0 0x00000000000004D01⤵
- Suspicious use of AdjustPrivilegeToken