Analysis
-
max time kernel
92s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-01-2025 07:17
General
-
Target
adm-hub.exe
-
Size
59.6MB
-
MD5
e20737240141c56388af8de1f151c761
-
SHA1
819b9fb1d2cbcf304b379470332822c33f39f554
-
SHA256
a8f611076c461e67ad46fb3c7dc118abb1ec9d9cc71076f12a372202dd302c91
-
SHA512
862c44ef6d1239fe0e47cb7aa1ebf951c84bf6aed771fe907dc540ea29730f136dabc4d113982bab8695f94b7f01abf2eaddd5104e616f6f9af33e5fcbdf560c
-
SSDEEP
1572864:j+rewmxQqMrlpA+Ql4oKErkZkcJDucqXZCxiJg:j9wmxyklDKErqkchuc3xii
Malware Config
Signatures
-
Detects RedTiger Stealer 64 IoCs
-
Lunagrabber family
-
Matches Luna Grabber Rule For Entry 25 IoCs
Detects behavior indicative of Luna Grabber malware
-
Redtiger family
-
Loads dropped DLL 58 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Detects videocard installed 1 TTPs 1 IoCs
Uses WMIC.exe to determine videocard installed.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 64 IoCs
-
Suspicious use of WriteProcessMemory 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\adm-hub.exe"C:\Users\Admin\AppData\Local\Temp\adm-hub.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\adm-hub.exe"C:\Users\Admin\AppData\Local\Temp\adm-hub.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"3⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "wmic csproduct get uuid"3⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\Wbem\WMIC.exewmic csproduct get uuid4⤵
- Suspicious use of AdjustPrivilegeToken
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "wmic path win32_VideoController get name"3⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\Wbem\WMIC.exewmic path win32_VideoController get name4⤵
- Detects videocard installed
- Suspicious use of AdjustPrivilegeToken
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
95KB
MD5f34eb034aa4a9735218686590cba2e8b
SHA12bc20acdcb201676b77a66fa7ec6b53fa2644713
SHA2569d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
SHA512d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af
-
Filesize
36KB
MD5135359d350f72ad4bf716b764d39e749
SHA12e59d9bbcce356f0fece56c9c4917a5cacec63d7
SHA25634048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32
SHA512cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba
-
Filesize
35KB
MD5a65c96fdc6f3b556248e3294bd9ce270
SHA100aa33533781a0bb2df5df5f4f2a3bcb1ab816b7
SHA256aed83fbd7266e9511fe2ea160853fda6da3a37e569b2408bd39809637eaab3f3
SHA5121cfd9bb03f4be8dd07097e5b6350bb7db31f48170a24c04c9144c78c1eebad4bf48746ce2652286cbff85f5ee1b0bb79048b56d90144f647996903562b6547cb
-
Filesize
47KB
MD5ff52c3b3ef7549a1d89070e8649f8ed2
SHA16b81e0e18f7ddf8fae7fa1e9aec1cef261e4aeae
SHA25669d181c25797e994a9961c9f40dc57d04f8391c4fd83d412d23162fb4beb4fd7
SHA512a84129700ff8cc95d3581d99b41b67f6d6e123d5f49132ca979e5acf1e9c70420c1b200b1c811327e8c815044270c61f8297df076eb3d8efbd60870d089316a3
-
Filesize
71KB
MD5796a3e2ecf2e31669defc1b3e07df327
SHA139c896e7217f9c2beaac7a831a5c24e1fff94714
SHA256803969a018b78e0ca670c0cf2c7b8ff62efd7dcbdc049070f0109d1147453cea
SHA512429dbbde27e65cc66754c3436153e04f9cde4800553caa678f8aebd55adb2490e93b7822650067eaa51094b47b5db1003af8c4d06aa1acb5d8531666cc308381
-
Filesize
58KB
MD55f8caca0a680cab74cbd25ee7faa8e91
SHA10d6fe9047af38c371b9a8006805658bee386661b
SHA256067ecceb2548c05b8dec8d755f756c9fd1a3bf806f911a7fb23fa6edd2649d5c
SHA51248f5f7cb0cbc96f2692b9b555a967031e5a91f0dba2ce96bdeccceda81984efa89edfe08808e5298e0a522af714064e9e88234647819e8d88b68b21b9a6317d9
-
Filesize
106KB
MD5a9e4c6c68e20518e4301a865a6387c4a
SHA1ff5b7ebf0802d042566ca8328a01b77b62066386
SHA25623d9216d09abe0dcf7f9d31db37239f2bcdcda1954ebe0e8fe094c905f071c1c
SHA5124349975b5b15ba6a5ddce52f724659f231e9e8282c571ca79a2bbf4000e7b5280ecc59e2e749812f6de5e453293935b6727b73ef19b072ea4db221d4a5943539
-
Filesize
57KB
MD5c351578636f53ef4bced4f34bdcedc1b
SHA168511b4948f7ce5b68f99ea50e837d27c89304ef
SHA256b0ef6cdbe1ca935b394e3ee10b90372579c1debac0e8e0807731faad92e43b68
SHA512f55157133d70efd812452baf6009c017c68f76ca33ae0abc91470bcc3fc1cea479b4e4cae61d337ababa18c29bf2d85ec76ae596003c8b7fe9d66f6faa343614
-
Filesize
35KB
MD5244ac279950597392f9a9133a976f20b
SHA18b0aefcc6e96f854cfce0425eaab0e037d717277
SHA2560e39dd9b6f307f6c43f25444492b7913039ea86c84e82715863fb2bf6c1cf4f4
SHA5121a898ce71e1b143e3c6070c290d6ceb2f5df7ae85ac3eb3ef0e29ce5173f774dbbd89f671da959d323280928c7d8232cc1b5855fbaebb4b0d81abac3238c1859
-
Filesize
85KB
MD59c52741fcdee40f2b8a44e7cc0431bc3
SHA190ee686ebd007c9a1adef06e25dc4f920854231b
SHA25663c20b51c3a15603a37169ebd48ec55d7f3edb6aae287b9b140a13806932b8ec
SHA512dbb06f6033dc76635c4352d5c238514937446ce7c70e65f3be2e7e0413ef95b341fc0a5ea7759c891c875f7b89a53a37ba2d29f5ad7a727bca149b98fb4ecee7
-
Filesize
26KB
MD59504e16d83794f4b0eb8e82c4bcf0071
SHA1a80c846b8d861c424bdb96aa48ae89a62deab037
SHA2569453cc768746f3c2c8d9f7bfb2ffeb37a8bd8a17ee4799e3b9eab09e4b2c6cfb
SHA51237cbb8e5e4613525a18f0f7972a922ea1e4f4ae8d82c4f440fa20df9cc8c66f7d052b7760606d00053731668d010f93f7bd083961177749a1d4fb7d6b879eda1
-
Filesize
31KB
MD5cdc685dfbf69fc99d7576441d191fc50
SHA15884801d5cef295abf67f2a592d5e6a801790d52
SHA256b933338c9b51a3133562e9395d0d11bd03e7cfa8cb1cc0d21aa89b11e9fd1fe8
SHA512c1719ab8f1e7aa4a7a585dce4eeca9d7fc4a3bbfacf7cee5f7f6a4c62bfd020095570ce535914c52904e8a7ae7fc1c720f4d82120c5cd005cf365281b74e1110
-
Filesize
25KB
MD5be01bfb58958533f902a4b2ce2e3cbce
SHA124c0f4858f67817872e874677cc677bd2d19316b
SHA2567fddae441eeeb41269d4216afb3044c05cbb6171fe8c21e111f965697a7f0cf4
SHA512f31bd9a2023f5095f21ea9779d0d4cc9b187d9850d4eae3787978890ccde61fcee7af018e5c100fe27f92abd53d1742be04f06e519d2b7c1317e98ac5ef1d0b7
-
Filesize
42KB
MD502330613585155baa15b57e33b6a1753
SHA1be35ad82df4c098fa667b15c432252e74c7923a1
SHA2565e850aa502e15b8dc02dd44095e112bb97aa9be12d21e73025af323413c03f81
SHA51218f3231ccfb91230b4510b76803418aaae692b1caf9543457f87248fae2fd107b9e387b30586d7a256800e9dbf58b1e2384a5ebc44ac5e47e265d224234c850b
-
Filesize
50KB
MD5c75497a7c703c95fbf01d41e35ebcfad
SHA1412201cfcb67c349835a60c1a18f49dbeac3bd31
SHA2565c8943b46d8bf6037c66735534568ce6d7f1fc9bf74d39020f097156742a4dec
SHA5129b7ffbb7d9f837550930cbeb2d226f471d0569e8d0c90681bd7a7326a86f7ab98e724e4a9ea75b5cb0ae601204c183d4928dc89bd2544212774c4e6de83e8732
-
Filesize
62KB
MD5e2edbf80205ca00b6333d6b6746175bb
SHA1c59f3ef991db057ddeb6966ad4a4792b87f52a74
SHA25615cdeb6ff633a7fbfa6f505aba943d88b50d7c410bdaabfb365bee9829ef806d
SHA512aff7a1a348a7557a17166ad80617c7d9a5b4a3a0fd72fe4135e173888aabd272026003546b7c6d474461d9815ffd089293f2f161124a875baa8ada8c34eb35f4
-
Filesize
24KB
MD5b68c98113c8e7e83af56ba98ff3ac84a
SHA1448938564559570b269e05e745d9c52ecda37154
SHA256990586f2a2ba00d48b59bdd03d3c223b8e9fb7d7fab6d414bac2833eb1241ca2
SHA51233c69199cba8e58e235b96684346e748a17cc7f03fc068cfa8a7ec7b5f9f6fa90d90b5cdb43285abf8b4108e71098d4e87fb0d06b28e2132357964b3eea3a4f8
-
Filesize
859KB
MD54c60bcc38288ed81c09957fc6b4cd7cd
SHA1e7f08d71e567ea73bb30656953837314c8d715a7
SHA2569d6f7b75918990ec9cd5820624130af309a2045119209bd90b4f70bc3abd3733
SHA512856d97b81a2cb53dcba0136afa0782e0f3f81bea46f98e0247582b2e28870b837be3c03e87562b918ec6bc76469eecc2c22599238d191d3fba467f7031a2acaa
-
Filesize
287KB
MD552a8319281308de49ccef4850a7245bc
SHA143d20d833b084454311ca9b00dd7595c527ce3bb
SHA256807897254f383a27f45e44f49656f378abab2141ede43a4ad3c2420a597dd23f
SHA5122764222c0cd8c862906ac0e3e51f201e748822fe9ce9b1008f3367fdd7f0db7cc12bf86e319511157af087dd2093c42e2d84232fae023d35ee1e425e7c43382d
-
Filesize
9KB
MD55de31a89708aa3532a1a1bef7347c067
SHA1d4a6968ca75a5fce14b09bbc3191c28acc1c44e2
SHA256a3decdd18950e46af55e322abd452dd66d2822bab85d4651a229a93eb7a4b2c6
SHA5127ea05575c351fcf26ddae51184406e5d4db9c5680ed5f5203625f090211ff83c52e3e7755bba0ba341385c1130a64c302f1fcdcbca4867aca0c3c85a6db4b670
-
Filesize
40KB
MD528c5ab859d1049306ae0e7e4f2f96a3e
SHA1de55f2965a93f0abc506742eb821d645ceeb1565
SHA256335f65161748ee1f7dc398d3e302817cb787f8bee0e1fe376d2ec6881e82a630
SHA512ee28b5abf0343afe0d412cbf535326be42f7234b4ce0640f735566ea99e3610ac96e16993c577077eddd05a73db6053a9dc3a028f0236423e1c842f81d518c63
-
Filesize
1.1MB
MD54df5b549ac0eb0c90db4faee686087b2
SHA11291e1767433f622ace0a8a2c5d209763c8555bf
SHA2567214cd7099c0bf4e8261ba0009fc2a9fe9163efbb53850dae9b7524b820faf39
SHA51236f1e4ab936d7e5117557c91bb74379d743f9142c84ab69c2c1354584c74f649346dd796a22173a6edaca3821841d67da790f59d68cf700c12f152ec77c77b7a
-
Filesize
23KB
MD54e261cbb8247260ea91860986110f805
SHA11563d67c2aabcb5e00e25ef293456c6481a2adc3
SHA256ddfd0755e011ea0df26d77cf3628e2cc59653aee02bf241b54b6b08561520453
SHA512076cdc8759f9cbbf7f8dc7b1eaba3c51f6c40ae6043b1fb55aa2fb83f81e86933d0f885a61d83300173b9bd7c589ff126e2a5d858a3f4036390d02eb1e73d229
-
Filesize
204KB
MD5c5dcc2fa27268b3cb0249c2192513d55
SHA15ae020ec0c2d966ff18d7b303c66a4cb08a3f070
SHA2561d8b3ec881b4bf24d5425322159af98c773f37c328229e06a3f5a5b2a3f82737
SHA5124d2fe3b6f778f3c157da6ff2e9bb110ee9ab0e90f921f605338429c4165e6be511911d251418682128d0fdd853e6b9ccfe03abce3a2db735c952717dc43b921a
-
Filesize
6.2MB
MD5a98829d5bf9bd0fafe7d802697e53bd6
SHA173401ce2ff9f42ccbf885bade4c8909f77778c8f
SHA25649daddf8b85819f27c97f61d516ed6d33626cea80a158e0994c961bca88bb427
SHA512719969222dfdc8f5b46ee4855fbccf9e8f59d9a5c1e31935fd624981633b6ae80fbf3dbc32a02f607072844e133c41bcd78f6f387627b71b6fc7476745e305a3
-
Filesize
31KB
MD5c506499ee527c8c15bd1202338d71868
SHA16a4d9c913254a60f5f47fd8834034a8eddacac24
SHA256ffa23be0529c7005651552e6d9f35622bb163feca9e1e48699ddfa6ada8c6654
SHA5124c24f37d566c31b1ecaf63024567b41cabefd9988825868ad46d2bf8fd1d93c4279d63bdcee2ad75da05a31de0dd6344b1e14c4274a61479f0f0ff2e678416f0
-
Filesize
87KB
MD516b38609f876981e175d25ab189465e8
SHA1c49455356b970fcde5ca0b59097a9b4e8da7ce5a
SHA256c91016393059729debc009ca678e3132d970099283b11a35d9208361ba9fc96e
SHA51235b0888d4ef0a7f0d11ca066dc87bbce6b0bb53a8d670278bf3e269d836e3211e93357dc22f006ca6722388e3eda899490aed3b5beb7312e047a0fe29d98ff34
-
Filesize
64KB
MD5fd4a39e7c1f7f07cf635145a2af0dc3a
SHA105292ba14acc978bb195818499a294028ab644bd
SHA256dc909eb798a23ba8ee9f8e3f307d97755bc0d2dc0cb342cedae81fbbad32a8a9
SHA51237d3218bc767c44e8197555d3fa18d5aad43a536cfe24ac17bf8a3084fb70bd4763ccfd16d2df405538b657f720871e0cd312dfeb7f592f3aac34d9d00d5a643
-
Filesize
1.4MB
MD52eac43445089be54e8fc98a8ef1a45de
SHA1ec0bcb5bbf781b104a351668c15f5b63775bb9b9
SHA2568503edb23e050affeb895fe647253493a172a5aeff5062aad2fa3c8c4dcaae93
SHA512a604c169c4e27db450a904cb5437a692da0b114ac1793eb7c470a81831dcc09a6091528f052a48039ae5f7496d0f8498cafa6485f38221466d34d9e757e5e7a4
-
Filesize
193KB
MD50f0e95fab7781458a0c7519004c299de
SHA12bcc65939d6cd4dc97f973f9dd303c49c2bd573b
SHA2564cf19511ca0f796670abb9ef760a2081f091f1be613eece04a1d4d79beaecc4d
SHA5122e89e75b2ddbdbf98dde2d9b100fda04e9b03f8b29c4d3f4b2c29d4ce74d5c6314fe558b6748ff939c892468a788f2470e957443369d9318b449cd99d2b4e43f
-
Filesize
62KB
MD57f9e63eae14711476c11dab1f2887627
SHA19f30c50cdfb4807e390ea8c7cca42c13243ceed1
SHA2567905866620d94c3f341fa5fab43082ca6af3fee09b75d5d1e4b1cd6319ee17cd
SHA512164ba0d32fd10eca67a062ca5b948232948f2329c3aeec581d065fd5e004dcf4ff0617d6e8ac3ec5fc6fb20807c5c222fe646d6a99a1eaab4fa15909c7226b77
-
Filesize
25KB
MD5f7bc78210297779ed53d82ba83474524
SHA12cf775888eb0f6b503aa3914d190ea53cb24bfd8
SHA2563f22ccd295ae81f5515b6256bda7ad97889fe2cf0a4c4ee8b4cc8fde79998314
SHA5122bec59882c7f46544e446e868a8ae1993bf6aa8a3d599c888d126498a9396482b72e35a2d9c34d77a5cadbbe59f3620ab3af02a802245e95dfac53be8f3d8529
-
Filesize
622KB
MD5d356044ee56072d6cc490d2ec387842d
SHA1c7c605efbbe5a4725ac4f942da2ecccc3fe4662c
SHA2566fec78acdd4bda3a400bed8a8cb4a5c8a0e9a5a0fe450317268dbb1d8207b92c
SHA512f53e48042cb3e6d626f4d2ba8f3b7b1f8ad5fa077df9024710c68d976ba9247642bb0e57a3fd704c9126e31b6efa7b97df577a00b1284e6bb219edf586e6cac4
-
Filesize
289KB
MD5cc8f4dd8309f2eb3e4137b6464a5d797
SHA1dcc7b250a57064b133694ac27fcfe570274425fd
SHA256a753e10a438b5646851be2c07d6c97e5868c4828d0db1d041e11b5ca45af4d3a
SHA5129fbe99dff749eddf4594b27bfbd643987c6610b7cdc1bed57937b8392ee9448084308700fde5f303970d835513403083004357f9973ad95da8da9eaa80fcb1fe
-
Filesize
48KB
MD5720ad6bad874f4ae4f15060ccdb1197d
SHA1f57f91099b5328589d3b30e16580cc7cf1c09134
SHA2560239fc9bf8ea4ebc8ff3a6cdef310780521975026a77ad7297a3bb156b76785e
SHA512df9b983d58b463218d4fcdd6f5378f3bcae8fdba042f926d003d1bbbbf8e96ed93218af106fec65de1bb185bcdaea2e96a3077efe864d7e691bb613edf3069c4
-
Filesize
167KB
MD5ab7ed53efcd117f758464ba217683279
SHA16e97c4bb849ef7b06714175f2385a53c9ee8dd17
SHA25656db3e5065806b99c72a2fdc4932e854a307a784138af5208fc5170ab44969b0
SHA5126f99bcfd202591e6d54ef934e217c63c0a06519d345e39d306d701227a14c621c820a960f4c38132ed04ccf92ef000c1858aec30ebebe2dc461457b755359cd9
-
Filesize
96KB
-
Filesize
48KB
-
Filesize
52KB
-
Filesize
184KB
-
Filesize
752KB
-
Filesize
4.4MB
-
Filesize
144KB
-
Filesize
172KB
-
Filesize
52KB
-
Filesize
96KB
-
Filesize
184KB
-
Filesize
3.5MB
-
Filesize
176KB
-
Filesize
3.5MB
-
Filesize
736KB
-
Filesize
80KB
-
Filesize
64KB
-
Filesize
100KB
-
Filesize
1.1MB
-
Filesize
212KB
-
Filesize
540KB
-
Filesize
84KB
-
Filesize
752KB
-
Filesize
184KB
-
Filesize
176KB
-
Filesize
156KB
-
Filesize
44KB
-
Filesize
60KB
-
Filesize
96KB
-
Filesize
144KB
-
Filesize
4.4MB
-
Filesize
184KB
-
Filesize
736KB
-
Filesize
1.5MB
-
Filesize
124KB
-
Filesize
3.5MB
-
Filesize
3.5MB
-
Filesize
220KB
-
Filesize
80KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
540KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
1.1MB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
100KB
-
Filesize
96KB
-
Filesize
52KB
-
Filesize
124KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
220KB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
1.5MB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
72KB
-
Filesize
52KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
164KB
-
Filesize
44KB
-
Filesize
112KB
-
Filesize
44KB
-
Filesize
52KB
-
Filesize
4.2MB
-
Filesize
19.7MB
-
Filesize
136KB
-
Filesize
184KB
-
Filesize
124KB
-
Filesize
96KB
-
Filesize
156KB
-
Filesize
44KB
-
Filesize
84KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
64KB
-
Filesize
80KB
-
Filesize
44KB
-
Filesize
736KB
-
Filesize
172KB
-
Filesize
752KB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
212KB
-
Filesize
176KB
-
Filesize
96KB
-
Filesize
60KB
-
Filesize
144KB
-
Filesize
4.4MB