Analysis

  • max time kernel
    29s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    20-10-2024 11:18

General

  • Target

    ETOxCheat-TestVersion.exe

  • Size

    870KB

  • MD5

    bea28a1e680f8b8053e64c8810dad71e

  • SHA1

    8464a9aeaa3a290c9a027484a5b6e1759e9eb0e8

  • SHA256

    df8227c17eee7cc65a3ff5244c073d4e072ee864100b2a293c0ef54e9b5b3ee0

  • SHA512

    b22641529e6e642f852bc43534d49c7bc47668a432edcd3f67f4a879c77aa0e92e1ce259fb41773ba15f0a70396fe031b1073320bc95812fd3fdd2a231caa669

  • SSDEEP

    12288:47wITbhKx7WQeu3D9FPJXOmQ+qO39WoCuwTvk83uRCS26qH3OqtwIulkyF3SkH:4EITMvRFhRRbNWoCfkYSEH3OqtwIuX

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ETOxCheat-TestVersion.exe
    "C:\Users\Admin\AppData\Local\Temp\ETOxCheat-TestVersion.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2348

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2348-0-0x000007FEF6003000-0x000007FEF6004000-memory.dmp

    Filesize

    4KB

  • memory/2348-1-0x000000013F920000-0x000000013FA00000-memory.dmp

    Filesize

    896KB

  • memory/2348-2-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB

  • memory/2348-3-0x000000001C480000-0x000000001C694000-memory.dmp

    Filesize

    2.1MB

  • memory/2348-4-0x000007FEF6003000-0x000007FEF6004000-memory.dmp

    Filesize

    4KB

  • memory/2348-5-0x000007FEF6000000-0x000007FEF69EC000-memory.dmp

    Filesize

    9.9MB