Analysis

  • max time kernel
    90s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/11/2022, 13:06

General

  • Target

    FastCopy64/FastCopy.exe

  • Size

    959KB

  • MD5

    bc1e8c0d6191fd8cf69118cb7eca1631

  • SHA1

    023986eedfe7d348b7e5b80ecde8d74c4a773c07

  • SHA256

    d16ce1ec19dfe22a83ea17338b80b7fed27abe52bed85282f043508584adace2

  • SHA512

    514376f7f96424fcecdeea37519b5cc53f826a6673962dc38925ea917192ed5ddcc1d24c261745f9d7a54f1a30b9d4f6661de6691eb0e5b65591c042f4072e01

  • SSDEEP

    24576:rPGtlq1Nwkh/dnZ7Rn8IUV0LSgTSXQ61l0Zu8Ai:rPGtlq1N/Zdrd7LtTkyZ7

Score
6/10

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FastCopy64\FastCopy.exe
    "C:\Users\Admin\AppData\Local\Temp\FastCopy64\FastCopy.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4804

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads