Analysis
-
max time kernel
117s -
max time network
129s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
29-01-2022 18:43
General
-
Target
f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c.exe
-
Size
125KB
-
MD5
438f3ea41587e9891484dad233d6faa6
-
SHA1
d75a66ebf43aefe1a7f12f7e04e3fff923e6a19e
-
SHA256
f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c
-
SHA512
229223b4fa8c812c5bd95a4d11835aebf686a43b71751f2a2ce95e79a9ac265c5e2761838e16365af9350edd2652fa8361c4b898b7ba11442edbee5c4974c1ea
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c.exe"C:\Users\Admin\AppData\Local\Temp\f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4KB