Analysis
-
max time kernel
38s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
19/09/2022, 18:28
General
-
Target
73fe62064443e7402e9adf66cb2ba0224f7380b636700e6c2e9084310afc62f6.exe
-
Size
41KB
-
MD5
7e4bdfb83b4abcc321504de09f998140
-
SHA1
30f47e44df8502c96b3685ae211d70991e0868a5
-
SHA256
73fe62064443e7402e9adf66cb2ba0224f7380b636700e6c2e9084310afc62f6
-
SHA512
2da312fbcd6a683393d46c2868b092e789e07e18af2282c75fe0f25f5d1344eb1430d56cbc91621e04830663ebea52101d78917d2f87d5d655e2937f6952fec1
-
SSDEEP
768:MFwOBpeTOvDmmDQCfxYegZekQZCaRZOTjCjdi612sxBQ:laeuDmmDl3giCEZOTejcg2D
Score
10/10
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\73fe62064443e7402e9adf66cb2ba0224f7380b636700e6c2e9084310afc62f6.exe"C:\Users\Admin\AppData\Local\Temp\73fe62064443e7402e9adf66cb2ba0224f7380b636700e6c2e9084310afc62f6.exe"1⤵
- Modifies WinLogon for persistence
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
136KB