Analysis
-
max time kernel
17s -
max time network
14s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
15/04/2025, 19:45
General
-
Target
newuimatrix.exe
-
Size
4.1MB
-
MD5
49b79a318c7cf4bcf6c3f44d0ed260f9
-
SHA1
790e8ba03760de49f818a716cd47531242d3dea6
-
SHA256
887b773172839a3149df2e67e8f6746a1beaef05c98718f525089f82d4eb15ff
-
SHA512
a400dd49adc1915d7322602c289c94488768b23c5553f14a87c78e68a4b9cacba65db55e0ee4cf3b11b97be4acfde3ed6d364b08a6cc79aab1d5283abb068d60
-
SSDEEP
49152:sDzSc87HjkdTn4DglwdOc+gtFY4gvojvb6PYO1iIVj6ut0CsMXqP4IzcRyOpSlvG:6Vx9Aazj/sMXqP4Izte
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\newuimatrix.exe"C:\Users\Admin\AppData\Local\Temp\newuimatrix.exe"1⤵
- Drops file in Drivers directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.1MB
-
Filesize
4KB
-
Filesize
12.4MB
-
Filesize
12.4MB
-
Filesize
4.1MB
-
Filesize
12.4MB