Analysis
-
max time kernel
42s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
05/11/2022, 13:06
General
-
Target
FastCopy/fcp.exe
-
Size
852KB
-
MD5
35d1edad8d94a4f8552eabafb2eba364
-
SHA1
066520330174a7da2b273bce2eee774948cb03e9
-
SHA256
755767d175b99d8df8e1aeb1547862626ad98d0b5eaa6493a3164e6bd2d654d1
-
SHA512
90127c84627d5a7be2346ddd34ab3f6f4fe27c70693e38892df7e7c0ee89a845af2d1a341bb6b64cee4142bf3494ae51a5c64922db7b0f4676b8ed797107d0bc
-
SSDEEP
24576:YaFW4EI9Q8auhUWQLcloUQGT//4vZ8ynn0:VnXtQRPGTn4vZN0
Score
6/10
Malware Config
Signatures
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FastCopy\fcp.exe"C:\Users\Admin\AppData\Local\Temp\FastCopy\fcp.exe"1⤵
- Checks whether UAC is enabled
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB