Analysis
-
max time kernel
144s -
max time network
162s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
29/01/2022, 14:30
General
-
Target
0ec8a952ab213091f04b02cc763ff13a3edb054dcdc33876c18e8b14b3570478.exe
-
Size
155KB
-
MD5
ed1daf18ef09fb2a5c58ab89824ecab0
-
SHA1
b97ae2f4f7c221586b0097afae8b3a7ded611180
-
SHA256
0ec8a952ab213091f04b02cc763ff13a3edb054dcdc33876c18e8b14b3570478
-
SHA512
5cd4a67b90d672ac2ff1b4193e35c31cf4a0bfb97e6b58471a03b830da43b1567b0b4179ae3620fade3d623f8f489df4f3cb2e5072a8f7f485725adc86f92d38
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ec8a952ab213091f04b02cc763ff13a3edb054dcdc33876c18e8b14b3570478.exe"C:\Users\Admin\AppData\Local\Temp\0ec8a952ab213091f04b02cc763ff13a3edb054dcdc33876c18e8b14b3570478.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4KB