Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
05-02-2021 14:48
General
-
Target
ztgjaTAB.exe
-
Size
28KB
-
MD5
9c310afa34927179f09153add55767b6
-
SHA1
7a36199b70cd194ac5cd0d388c6d98e16a2821f8
-
SHA256
95094182dfdf51212b92c876fef1a796965814bb77bb514c33bbe4bc0ce3d34e
-
SHA512
e5d6fdc59a1bb81b45fdf5283eb6438c865d5700650ec36e4844c13cdd2437072d10907c8fc71a1319755313466aace4cc4445e05bf03abed7f91fb5632e956c
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ztgjaTAB.exe"C:\Users\Admin\AppData\Local\Temp\ztgjaTAB.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB