Overview

overview

6

Static

static

Stub.exe

windows7_x64

6

Stub.exe

windows10_x64

6

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    07-07-2020 18:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Stub.exe

  • Size

    45KB

  • MD5

    e1b8d6bbb3bc4c31cb820b113b999547

  • SHA1

    58758d548f964afe42418b8718331f15cf38b23c

  • SHA256

    081ed36d1d39e9ab29d11a45874073129921d52429ab9ccb9c2fcca62b9e89fb

  • SHA512

    4292abaa0bcd9c800891cdd1690adc0e4280319d67d76da683f9a0026d027f3921f291e752f1b8b57b6e4f94b6e56282c88240c98c09d4ad4cce93ac93663d65

Score
6/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Stub.exe
    "C:\Users\Admin\AppData\Local\Temp\Stub.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3136

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Replay Monitor

Loading Replay Monitor...

Downloads