Analysis
-
max time kernel
47s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
23-11-2022 10:02
General
-
Target
9c3ccbd352fab188e58c3ef862bdcafd96255ebe4fa70c6dfd3f6fcad8f2cd9a.exe
-
Size
422KB
-
MD5
c8858e97a00c1984576adcef13c1a2bc
-
SHA1
77b7fa8f5d03a7d0ee66ccac86a15a54504e5e72
-
SHA256
9c3ccbd352fab188e58c3ef862bdcafd96255ebe4fa70c6dfd3f6fcad8f2cd9a
-
SHA512
1c2637cabee72c2cc413e7cc493e028f2d1ddec9f98d64f60cca607465192b08fc449f4b160c1b6980a1cfc0a15848b47e4f3bd36afefeda4bd57050c455ae13
-
SSDEEP
12288:1RhQGTCYy/Hc7u9ij/B0bGuqTtw05b1LLAHG2:1RhQGTXy/87uJ+Ttw05pL0/
Score
8/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c3ccbd352fab188e58c3ef862bdcafd96255ebe4fa70c6dfd3f6fcad8f2cd9a.exe"C:\Users\Admin\AppData\Local\Temp\9c3ccbd352fab188e58c3ef862bdcafd96255ebe4fa70c6dfd3f6fcad8f2cd9a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.2MB