Analysis
-
max time kernel
12s -
max time network
15s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
19/11/2024, 15:32
General
-
Target
CRACKED CLOUDY/cloudy-cracked.exe
-
Size
1.3MB
-
MD5
f6138d4bcc2ad07e24542a4d1af1fbf1
-
SHA1
fe5c9391cf451b05a10a09ad842de4d7fc14e2d9
-
SHA256
aaaa841b7c207f3ec7a41922e6873e637d8640deb81229b816d4b524bb318ab5
-
SHA512
4a7270c05281d638d0b498e90bf3b8409e76e76af17e494cfe1bd384e61656f7e1fad30b20483dbaf4597e3e3a6aa36e91c661df4f4f3fa2f75907c60319a543
-
SSDEEP
24576:3QJLxgQVz/df8zhvPC6WBXZlF6J6g8iLIYusX2gdZqbJvtzhv:3AiEz4hvPUBzIOLQIBthv
Score
1/10
Malware Config
Signatures
-
Delays execution with timeout.exe 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CRACKED CLOUDY\cloudy-cracked.exe"C:\Users\Admin\AppData\Local\Temp\CRACKED CLOUDY\cloudy-cracked.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /c start cmd /C "color b && title Error && echo You must run the function KeyAuthApp.init(); first && timeout /t 5"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.execmd /C "color b && title Error && echo You must run the function KeyAuthApp.init(); first && timeout /t 5"3⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\timeout.exetimeout /t 54⤵
- Delays execution with timeout.exe
-
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.3MB
-
Filesize
10.8MB
-
Filesize
112KB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
712KB
-
Filesize
136KB
-
Filesize
240KB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
56KB
-
Filesize
224KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB