Analysis
-
max time kernel
187s -
max time network
195s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
07/11/2022, 18:40
General
-
Target
3ce78425786dfcb90410e73dff354670a568b6fb7c43fd1e873441f82c654fd9.exe
-
Size
205KB
-
MD5
0ff0ad2dfd901ebc60b110ce85c365b7
-
SHA1
ccc878bc45d7dc271c2a0dd9cd1132ad0eba3286
-
SHA256
3ce78425786dfcb90410e73dff354670a568b6fb7c43fd1e873441f82c654fd9
-
SHA512
b034fb210b8b8766785d3f3592f04ad228cd31dae21c8ab946ebff7dda66c05811d4fbfc999d6b917062c597f824b29d22c694992166cf6e81b489ec2545be71
-
SSDEEP
6144:sfdGG0B4CM2+cmnNQFWDKL97/QxWcHnVRvJGvBgiPeZZyNkM:+GG0B4F2vmuFOKL9TQxWcHnz8v+hYkM
Score
8/10
Malware Config
Signatures
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ce78425786dfcb90410e73dff354670a568b6fb7c43fd1e873441f82c654fd9.exe"C:\Users\Admin\AppData\Local\Temp\3ce78425786dfcb90410e73dff354670a568b6fb7c43fd1e873441f82c654fd9.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
8KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
152KB