Analysis
-
max time kernel
272s -
max time network
275s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
14/09/2022, 22:15
General
-
Target
32b8f682c5f72d2a7b885504ded11fcfdf97c042a671404826622176f92a0747.exe
-
Size
6.0MB
-
MD5
6559cd9bbd2417ca0fecf44da4a781e8
-
SHA1
fb67ea8a12a6b212b02f35787e7e95d20df817bc
-
SHA256
32b8f682c5f72d2a7b885504ded11fcfdf97c042a671404826622176f92a0747
-
SHA512
6fb422544509e415409d56b23144a3d590f35bc57dee748df8fb52ec082c59dd7497ae6b961f36f7478d16862e78e679e0b6b00460af0a4532f926a38e19d1f9
-
SSDEEP
49152:P297sPxD1YYjPAjWTYTqOV7m2hNpK1uzcThP1973tpoJKHPydzVV5uUOJQHqTTuv:P87sPUumWY7RUvJ/oJ+bUOJluu2
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 31 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\32b8f682c5f72d2a7b885504ded11fcfdf97c042a671404826622176f92a0747.exe"C:\Users\Admin\AppData\Local\Temp\32b8f682c5f72d2a7b885504ded11fcfdf97c042a671404826622176f92a0747.exe"1⤵
- Checks BIOS information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.0MB
-
Filesize
1.9MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
680KB
-
Filesize
312KB
-
Filesize
6.0MB
-
Filesize
1.9MB
-
Filesize
304KB