Analysis
-
max time kernel
154s -
max time network
171s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
01-02-2022 03:39
General
-
Target
d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4.exe
-
Size
50KB
-
MD5
c5a86a4a3099d907967d739d5d6f5436
-
SHA1
45bdcdedb99ce9e62b7d0efc44eaa99a72ad12ce
-
SHA256
d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4
-
SHA512
5e912ac74c125a4bb861d0136046c2affc3839d9faf13a07be59f3e076fb3b5d964019ff3056d11d5382fc995b5cf880b983569166c43982211d3f0c4ac51fa5
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4.exe"C:\Users\Admin\AppData\Local\Temp\d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4.exe"1⤵
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4KB