Analysis
-
max time kernel
139s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
21-11-2022 14:56
General
-
Target
bf91c97656f246f730a94208577bce4e121e84882c1f2e62bbb796785601bcae.exe
-
Size
284KB
-
MD5
31dec4a419d41c4d41ae2f4508dd0cf0
-
SHA1
d2266eac4b3a5aaa4738a4273f951ef72170170e
-
SHA256
bf91c97656f246f730a94208577bce4e121e84882c1f2e62bbb796785601bcae
-
SHA512
a370e76fb56e75655432933b9291e963893a833538c23a4e7336dc08cfba73f457f4963545918fefbc5a2acc5ae64cff8d8e3742957a8320bca54498236f9891
-
SSDEEP
6144:wr0P0hMMvwJXi6JY32TKFCNxMW59Dl+pCdxY4EUz6bIot/:wr0UPYy3MKUJDlNQUzAt/
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bf91c97656f246f730a94208577bce4e121e84882c1f2e62bbb796785601bcae.exe"C:\Users\Admin\AppData\Local\Temp\bf91c97656f246f730a94208577bce4e121e84882c1f2e62bbb796785601bcae.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQMin.exe"C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQMin.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
284KB
MD531dec4a419d41c4d41ae2f4508dd0cf0
SHA1d2266eac4b3a5aaa4738a4273f951ef72170170e
SHA256bf91c97656f246f730a94208577bce4e121e84882c1f2e62bbb796785601bcae
SHA512a370e76fb56e75655432933b9291e963893a833538c23a4e7336dc08cfba73f457f4963545918fefbc5a2acc5ae64cff8d8e3742957a8320bca54498236f9891
-
Filesize
284KB
MD531dec4a419d41c4d41ae2f4508dd0cf0
SHA1d2266eac4b3a5aaa4738a4273f951ef72170170e
SHA256bf91c97656f246f730a94208577bce4e121e84882c1f2e62bbb796785601bcae
SHA512a370e76fb56e75655432933b9291e963893a833538c23a4e7336dc08cfba73f457f4963545918fefbc5a2acc5ae64cff8d8e3742957a8320bca54498236f9891
-
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
1.0MB