Analysis
-
max time kernel
149s -
max time network
164s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
29-01-2022 19:28
General
-
Target
a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714.exe
-
Size
95KB
-
MD5
37b93ed2e803c35d2f0dee28864a5d02
-
SHA1
27385b5fdfab1fd83dcac32750879ff4c2f82797
-
SHA256
a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714
-
SHA512
a98f82cecb1790693e4f15c48c35adf1d14645c98d2e808fff38018c879a1e869dadd983f495372ea99d7ba15c7bafdae521e875d5d47b8787d5ae8bfc43187c
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714.exe"C:\Users\Admin\AppData\Local\Temp\a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4KB