Analysis
-
max time kernel
142s -
max time network
163s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
29/01/2022, 16:08
General
-
Target
819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7.exe
-
Size
162KB
-
MD5
a74165ec1d55b682ed232ffde62b3b11
-
SHA1
df8822b47f7bea4a8b21a0708dd48b1cbced8e90
-
SHA256
819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7
-
SHA512
a46ea23ed75715a0881b0294218decda50bf565fc273c24a119d73747d5f06c8e47e8d68a00a2c024e32ee24b93c9804cbd6f9ecc6e83ca0f240fc4818d51713
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7.exe"C:\Users\Admin\AppData\Local\Temp\819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB