Overview

overview

10

Static

static

3

perm/mac/R...64.dll

windows7-x64

1

perm/mac/R...64.dll

windows10-2004-x64

1

perm/mac/R...sh.exe

windows7-x64

1

perm/mac/R...sh.exe

windows10-2004-x64

1

perm/mac/rtkio64.sys

windows7-x64

1

perm/mac/rtkio64.sys

windows10-2004-x64

1

perm/mac/r...64.sys

windows10-2004-x64

1

perm/mac/spoof.bat

windows7-x64

1

perm/mac/spoof.bat

windows10-2004-x64

1

perm/seria...64.exe

windows7-x64

1

perm/seria...64.exe

windows10-2004-x64

1

perm/seria...of.bat

windows7-x64

10

perm/seria...of.bat

windows10-2004-x64

10

perm/seria...er.bat

windows7-x64

1

perm/seria...er.bat

windows10-2004-x64

1

perm/seria...64.sys

windows7-x64

1

perm/seria...64.sys

windows10-2004-x64

1

perm/seria...64.sys

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-01-2025 00:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    perm/mac/RealTek_flash.exe

  • Size

    745KB

  • MD5

    302a86510b5c2a807bfad326224880d1

  • SHA1

    0afea09cb54d9216895e1ad2e60e2606c89d8697

  • SHA256

    791d18024007d988725ad24ae499f9e8f26dfc1ac8f95f9094568fc5c300d0bf

  • SHA512

    a4da927d4e33639b97062fcae6003075e60ce939edf7e807119e2f5b300c0918fdbd801668d78e8a707e920bb7b4aade72ed4ac3f3168129b1af2fe40397ff4f

  • SSDEEP

    12288:pp99WL/vCzx3QRIL4DbKsxA/3SYsF2WKEnkiUJ0yn:r8/vaN4PKsxisF2L+yn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\perm\mac\RealTek_flash.exe
    "C:\Users\Admin\AppData\Local\Temp\perm\mac\RealTek_flash.exe"
    1⤵
      PID:3896

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads