Analysis
-
max time kernel
86s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
03-10-2022 05:58
General
-
Target
4fbd11e999ba3229b6e17a2431c6c1a199a5355d90f90ee7d2fe95ab7c7013f4.exe
-
Size
25KB
-
MD5
6346c6c310620669816b4a499a4854bd
-
SHA1
72d8f78fc66d897d5a34591accd779a336374af2
-
SHA256
4fbd11e999ba3229b6e17a2431c6c1a199a5355d90f90ee7d2fe95ab7c7013f4
-
SHA512
f30c1f47401d0ae6f35bfcbc808c3ef9c22f1bdf78f156b2e87a2a531b735dfbdcd0f86286d41f76490cfbde71d53171eddfc9b0033edc8848df79c2dd0b9374
-
SSDEEP
384:KMMtyNUXRkRAiu9PbX2yl8W/8AoWqulXyqyQFxH/f4kVdjaLacmkC0GJsJxXSoV6:aW2GAIBQFxfftjaLacmkLGKZSh
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fbd11e999ba3229b6e17a2431c6c1a199a5355d90f90ee7d2fe95ab7c7013f4.exe"C:\Users\Admin\AppData\Local\Temp\4fbd11e999ba3229b6e17a2431c6c1a199a5355d90f90ee7d2fe95ab7c7013f4.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\explorer.exeC:\Windows\explorer.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
-
Filesize
8KB
-
Filesize
8KB