Analysis
-
max time kernel
44s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
20/10/2022, 13:55
General
-
Target
5c8a7524f867934dffea4ea409c1733ff358aa0faa10a57138a3c5bd843bc81d.exe
-
Size
443KB
-
MD5
9064e141a33f5d1ad31711ec4d62acf9
-
SHA1
0060987d2e064741a5e5dca1fdf25b291dc25040
-
SHA256
5c8a7524f867934dffea4ea409c1733ff358aa0faa10a57138a3c5bd843bc81d
-
SHA512
2344168b33e139144b50bd13dee7f50075b11a3718aab0b47dd609e76b6da652247b0b2e0432f96dbd06b84b00d210e11bfeb6823e05554c0f85fcc20b01d5ca
-
SSDEEP
6144:PWWlEhSMl9o1yVzuMB9gX9xjiijiBjxzJTU/:PWWlEhTl9oyVqMB949liijiV1JTU
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c8a7524f867934dffea4ea409c1733ff358aa0faa10a57138a3c5bd843bc81d.exe"C:\Users\Admin\AppData\Local\Temp\5c8a7524f867934dffea4ea409c1733ff358aa0faa10a57138a3c5bd843bc81d.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.1MB
-
Filesize
16.6MB
-
Filesize
124KB
-
Filesize
124KB