Analysis
-
max time kernel
76s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
21-10-2022 00:56
General
-
Target
de39c6fb9bca00a8323b471ad79fac10efb3f91335efc6dfd98636f787a0ac19.exe
-
Size
460KB
-
MD5
7cd01ed1ffa5437a7bf686673a00fd01
-
SHA1
12ba348875850eccf6b9ed8307e06f4fdd52ed8f
-
SHA256
de39c6fb9bca00a8323b471ad79fac10efb3f91335efc6dfd98636f787a0ac19
-
SHA512
c1675753893c334f34ac58d90b3046409688da70c3e751dac6b9934f2d71f5e2569aec671717baf91c5ce48d4b7a34d0bad2a532038d74e51759d981b7ec629f
-
SSDEEP
12288:pa2AW4g1y8JB4IJwHfO1Kho8r13L5g1z0myS43XNtVoS9P:8dWL4IJr2hb5g1z2S43XNtlP
Score
8/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Identifies Wine through registry keys 2 TTPs 2 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\de39c6fb9bca00a8323b471ad79fac10efb3f91335efc6dfd98636f787a0ac19.exe"C:\Users\Admin\AppData\Local\Temp\de39c6fb9bca00a8323b471ad79fac10efb3f91335efc6dfd98636f787a0ac19.exe"1⤵
- Identifies Wine through registry keys
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
1.1MB