Analysis
-
max time kernel
21s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
19/09/2022, 21:08
General
-
Target
0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda.exe
-
Size
118KB
-
MD5
03e1ed952ef1ed99fe269d1cb0c15c21
-
SHA1
ae17a5ecdb5979c5783fbeddae062fa1f1e20fdd
-
SHA256
0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda
-
SHA512
b0896292b8e4bd9c9557ba1ef2c89a46be0bccde0e51ad857ccb4d2f5133b34b04095f67cce6fe3e51a209a9ad0d390a729c6b306618b9458a8fa7084c6ac50f
-
SSDEEP
3072:dSKf2N9xxjcgjQFrUBX/7RVIc7BFNROGgm:8KfUjcOWrY/7jxZ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda.exe"C:\Users\Admin\AppData\Local\Temp\0a17cb55b156e7e091c502f2f1e2f81b79e2b33848d450b4505ce14307f2beda.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
236KB
-
Filesize
11.3MB
-
Filesize
52KB