Analysis
-
max time kernel
150s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
11-10-2022 09:07
General
-
Target
e971e46da1e1545cff1224bed3661188ec4e637957608148892214488c965c08.exe
-
Size
227KB
-
MD5
741b88435e00aeaabd07db3eea02241f
-
SHA1
b06bf92fc54e2725218d21b11b43d0baf708cba2
-
SHA256
e971e46da1e1545cff1224bed3661188ec4e637957608148892214488c965c08
-
SHA512
200ded88563763431e4677bb0b1807803bf99c56425bdb3fefd59acaa31be2417ffe299159ba6a6a84db2a3b9f25774facae24fe00afeb1b1e619b05597b028a
-
SSDEEP
6144:DgGdKtGiFdcPv1d2W6Jk+YGRPGSD4mnfOdxL/spE2W:USi39Jk+5RPHnOLsK2W
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e971e46da1e1545cff1224bed3661188ec4e637957608148892214488c965c08.exe"C:\Users\Admin\AppData\Local\Temp\e971e46da1e1545cff1224bed3661188ec4e637957608148892214488c965c08.exe"1⤵
- Checks BIOS information in registry
- Modifies WinLogon
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.2MB
-
Filesize
328KB
-
Filesize
1.2MB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
328KB
-
Filesize
1.2MB
-
Filesize
12.3MB
-
Filesize
12.3MB