Analysis
-
max time kernel
78s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
29-10-2022 15:53
General
-
Target
a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2.exe
-
Size
43KB
-
MD5
7eda7e667e184fde8b39cedcc058f95a
-
SHA1
00e61aeacc5a3dd697d921a291fe39ab182d3967
-
SHA256
a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2
-
SHA512
1d88f814a34413e72e352d7712d19b6a61330f6dafa4cb2dd989ff38594ce4967771786a0ded062fa7d7e1ba42c26a78d63b6a2abf231ec151c8b9ec69007e80
-
SSDEEP
768:aWgJgFrAERfvckKRb19VObGNHQdq+1hb6TJ2Jr5ZkmELR7xeMjypEK+T:9FTckQbpqP1h+TS4mKR7khN+T
Score
9/10
Malware Config
Signatures
-
Nirsoft 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2.exe"C:\Users\Admin\AppData\Local\Temp\a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
108KB