Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20250113-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20250113-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    15/01/2025, 22:03

General

  • Target

    ServerHosting.exe

  • Size

    183KB

  • MD5

    a5020bd836a43cdac8f09c46ff347996

  • SHA1

    db26350ef5ad05ac6e3f143c9f467710909a966c

  • SHA256

    a43a90764ac632610c9a0ec709604aded75b7e338ee81071da63e4a9d294236b

  • SHA512

    9c7c972a0dbf52480c2d467a064a6bd45ad41850f9cc5e341b5d5a4ad45fbdf6ec04b6856f751710a54456d42d3b18e50ceab2dcd076436a2fa4b1db06ff1ac0

  • SSDEEP

    3072:GurlxKc5jBwZde2vBVQF4EWjFRA229YvepcCBKXSpL:lrlxjYdeAVQF4EWx92iepcCBKi

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe
    "C:\Users\Admin\AppData\Local\Temp\ServerHosting.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:556

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/556-0-0x00007FFE6DE45000-0x00007FFE6DE46000-memory.dmp

          Filesize

          4KB

        • memory/556-1-0x000000001B080000-0x000000001B126000-memory.dmp

          Filesize

          664KB

        • memory/556-2-0x00007FFE6DB90000-0x00007FFE6E531000-memory.dmp

          Filesize

          9.6MB

        • memory/556-3-0x000000001B680000-0x000000001BB4E000-memory.dmp

          Filesize

          4.8MB

        • memory/556-4-0x000000001BBF0000-0x000000001BC8C000-memory.dmp

          Filesize

          624KB

        • memory/556-5-0x00007FFE6DB90000-0x00007FFE6E531000-memory.dmp

          Filesize

          9.6MB

        • memory/556-6-0x0000000000980000-0x0000000000988000-memory.dmp

          Filesize

          32KB

        • memory/556-7-0x000000001BD90000-0x000000001BDDC000-memory.dmp

          Filesize

          304KB

        • memory/556-8-0x000000001E9A0000-0x000000001ECB0000-memory.dmp

          Filesize

          3.1MB

        • memory/556-9-0x00007FFE6DB90000-0x00007FFE6E531000-memory.dmp

          Filesize

          9.6MB

        • memory/556-10-0x00007FFE6DE45000-0x00007FFE6DE46000-memory.dmp

          Filesize

          4KB

        • memory/556-11-0x00007FFE6DB90000-0x00007FFE6E531000-memory.dmp

          Filesize

          9.6MB