Analysis
-
max time kernel
29s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
20-10-2024 11:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ETOxCheat-TestVersion.exe
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
General
-
Target
ETOxCheat-TestVersion.exe
-
Size
870KB
-
MD5
bea28a1e680f8b8053e64c8810dad71e
-
SHA1
8464a9aeaa3a290c9a027484a5b6e1759e9eb0e8
-
SHA256
df8227c17eee7cc65a3ff5244c073d4e072ee864100b2a293c0ef54e9b5b3ee0
-
SHA512
b22641529e6e642f852bc43534d49c7bc47668a432edcd3f67f4a879c77aa0e92e1ce259fb41773ba15f0a70396fe031b1073320bc95812fd3fdd2a231caa669
-
SSDEEP
12288:47wITbhKx7WQeu3D9FPJXOmQ+qO39WoCuwTvk83uRCS26qH3OqtwIulkyF3SkH:4EITMvRFhRRbNWoCfkYSEH3OqtwIuX
Score
1/10
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS ETOxCheat-TestVersion.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer ETOxCheat-TestVersion.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion ETOxCheat-TestVersion.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe 2348 ETOxCheat-TestVersion.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2348 ETOxCheat-TestVersion.exe