Analysis
-
max time kernel
187s -
max time network
221s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23/11/2022, 23:18
Static task
static1
Behavioral task
behavioral1
Sample
fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe
Resource
win10v2004-20221111-en
General
-
Target
fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe
-
Size
557KB
-
MD5
447988c03b2a309bb73b88bf57dc1690
-
SHA1
c9025e151fc75e19a26a2d183a3b36399d427755
-
SHA256
fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed
-
SHA512
c2658a257ff8a54121c069459c99874b2808f1b0dd151842e15c6c8b51920d4b3989bfadfcfbf9b29b697a5d88d7cfaf7eef14e6162b128bf8743362c3daa5d2
-
SSDEEP
6144:WN73TeVbl0ZnF0y6oSOtrHX6H5wITUXj/MBZEcmUbPl6d1i2QqQwv4LhY+:+SP0ZnFhtSO05ZQj/MzEcKn9Q7wv0v
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 2556 fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe 2556 fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2556 fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2556 fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe 2556 fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe"C:\Users\Admin\AppData\Local\Temp\fd567bb697c5afe9af44b59f3a84d40f11d581e547d36e4d7c12c9dbbcd686ed.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2556
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
306KB
MD53ca0638e7119f63f2b6fc7426b3b0f8f
SHA1fa699c3cb5ec74cfc8ebdade3a8a3dc014c29582
SHA25682fcb7e72f5bee64eecbf9c1e553d65374951ffccaaa07d5848d624d732d40cf
SHA5120769d88beb6fafe83bcc9176fc7892b8ba9c4a02be37129a57dc6513472b245179afea1abad161179414ef625890e1e8f6ac76d1d907887fe73f0ddb140e61e8
-
Filesize
306KB
MD53ca0638e7119f63f2b6fc7426b3b0f8f
SHA1fa699c3cb5ec74cfc8ebdade3a8a3dc014c29582
SHA25682fcb7e72f5bee64eecbf9c1e553d65374951ffccaaa07d5848d624d732d40cf
SHA5120769d88beb6fafe83bcc9176fc7892b8ba9c4a02be37129a57dc6513472b245179afea1abad161179414ef625890e1e8f6ac76d1d907887fe73f0ddb140e61e8