Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
23-11-2022 11:42
General
-
Target
099c36d73cad5f13ec1a89d5958486060977930b8e4d541e4a2f7d92e104cd21.exe
-
Size
440KB
-
MD5
2f52d3921613b2fe06c9eb9051d45e60
-
SHA1
24b3928afcf8207c7e78c2f81f1d28c032830308
-
SHA256
099c36d73cad5f13ec1a89d5958486060977930b8e4d541e4a2f7d92e104cd21
-
SHA512
030b04ef9936fa564ab39476fffe3d6ecf361f5ecfe06dc0225477e5d62c5c71d0314199c8bbaf076582b244fc08449c2bf232a3d3fc6ed8c58af44f373a610e
-
SSDEEP
6144:OKvY0rS/YuuFDNr5pE5vAAP7lJuxWWkPIkHf+46UBMm:TvdIP2rnExASTuxLkd/+5mMm
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in System32 directory 2 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\099c36d73cad5f13ec1a89d5958486060977930b8e4d541e4a2f7d92e104cd21.exe"C:\Users\Admin\AppData\Local\Temp\099c36d73cad5f13ec1a89d5958486060977930b8e4d541e4a2f7d92e104cd21.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
204KB
-
Filesize
8KB
-
Filesize
312KB
-
Filesize
444KB
-
Filesize
312KB