Analysis
-
max time kernel
139s -
max time network
158s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
29-01-2022 19:00
General
-
Target
f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97.exe
-
Size
160KB
-
MD5
38ce32cb94092cc6790030abcc9a638b
-
SHA1
82c0c36800674769914fd7c6bdc2566369250543
-
SHA256
f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97
-
SHA512
7dd79fd8ca08166af3819b8aa688d9944f674191ff74f032b254bd2465d45356ce3ed87f539a5d3360482a197103c76a2169953035bf7a46dd07620ab4cc14b2
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97.exe"C:\Users\Admin\AppData\Local\Temp\f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4KB