Analysis
-
max time kernel
153s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
03-07-2022 03:35
General
-
Target
3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b.exe
-
Size
184KB
-
MD5
74dc37b7aabf745eac1d5fc65428488e
-
SHA1
fa406e4e4fe581091e30bac24ad0a1023bc5eed3
-
SHA256
3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b
-
SHA512
660d9ed08afa90dc782d3814ab8428137d5748c63433b3fb3ddc76da9412a279d1da2fd87e1a11dbedd486edbdabd5db871d4912704e49b9ccb3ac3c39e4ac21
Score
9/10
Malware Config
Signatures
-
Looks for VirtualBox Guest Additions in registry 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b.exe"C:\Users\Admin\AppData\Local\Temp\3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b.exe"1⤵
- Looks for VirtualBox Guest Additions in registry
- Checks BIOS information in registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
192KB
-
Filesize
200KB
-
Filesize
192KB