Analysis
-
max time kernel
31s -
max time network
121s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
21-07-2021 14:05
General
-
Target
ad2917599132e15656b78cca87799907.exe
-
Size
6.6MB
-
MD5
ad2917599132e15656b78cca87799907
-
SHA1
6420a174293f9530ca89ff618ca9d42ac4a38c47
-
SHA256
157da2de491550c5ac25dc65049e0d6188cb1cad5d5e6124afabf5627b669573
-
SHA512
fa3c60abfc32d45f3dc442cffc6a4420b0eb57718c8aa65404fbeccf3aadc03a11c284473d6c091c7d596fa99142742632a3eaaec3c2d55e9891daf104b3f65b
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad2917599132e15656b78cca87799907.exe"C:\Users\Admin\AppData\Local\Temp\ad2917599132e15656b78cca87799907.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
7.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB