Resubmissions
08-10-2022 15:38
221008-s23p1sehf8 10Analysis
-
max time kernel
47s -
max time network
56s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
08-10-2022 15:38
General
-
Target
manycam.7.6.0.38-MPT.exe
-
Size
229KB
-
MD5
99bc00543dd33142549458775fc146a8
-
SHA1
757f6569d16699fdb1f1597d6bac245fe2f88d27
-
SHA256
3bacbaf79d434a128d3a32792ab8f87aaa4854dacb89f475d4dec0f3addbd33c
-
SHA512
d77214c376d719217cdf830e4bc41251181750f330e9aa0b9d4ddb2e61959068780e8a2aa1c216f5217954436561bb643112bbf7a3dd269c07257ce8e7d0d8e2
-
SSDEEP
6144:fodJmiTnPc8G9S7KkzadJeXeD67fOrkz:fPenPcFS2j0eDSOrW
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\manycam.7.6.0.38-MPT.exe"C:\Users\Admin\AppData\Local\Temp\manycam.7.6.0.38-MPT.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0xc81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
-
Filesize
195KB
MD50f6a9bbbff53c8c215d1f0ce566b0f5e
SHA128906d516edf25fb58b6cc755725fde4504ab5b8
SHA256380c0e3953de8cd1ce3793930821b85e02e40cfb13be3e1b57a44782f877dbdf
SHA512a3007152c7927bb57d0887df82966f02fce739f7ce168f7f61676795a0d133519a007f0d2d9e41a645670eafce4b66a1682417e7e4b73973d28187e85c84e255
-
Filesize
8KB
-
Filesize
576KB
-
Filesize
76KB
-
Filesize
12KB
-
Filesize
76KB