Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
12/10/2024, 18:05
General
-
Target
DomaIQ.exe
-
Size
211KB
-
MD5
27d5e5a09fa180c3238ed33bc7cf993b
-
SHA1
355f72845fcf414001808a8491e8dee3b8863cfb
-
SHA256
235602a88f5602010bc33f5b05671bfad3e2599d96273fc2c361357507ad08bc
-
SHA512
036a7620212f83663ae0c7498501fdba1609bf68488b735ac30fd986ed6c9017c132d562798e9bbcc911945601ea17d64e00020331ba2ef68cd5251ec40ad04b
-
SSDEEP
6144:yX8M6vMCNntOkTsCtIwk3r2G7n58w4yw:dve7n3w
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DomaIQ.exe"C:\Users\Admin\AppData\Local\Temp\DomaIQ.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
232KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB