Analysis
-
max time kernel
191s -
max time network
229s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 13:00
General
-
Target
d582337007bf398317b675902fc41d8d296036c1453731faac235ade55e1a628.exe
-
Size
440KB
-
MD5
a92de61e40e012e523fb0d3072aba2e2
-
SHA1
14bd95e5dc96b92398a7b2a3940643421200f62f
-
SHA256
d582337007bf398317b675902fc41d8d296036c1453731faac235ade55e1a628
-
SHA512
a53836aaa4d058a2400482851cc1b0f1e493947f6e4b97cfc06ac84c5900238c464b482707e4be54a87e94bb555c2e3448161a640ddfe4e187133fca8da7c297
-
SSDEEP
6144:NeqiwN54Q/1M+EF4YiMvjpOkzSAQmzL2tFWhnEU4z3qpF+cC5/+XuF:cpwow1AFjLEcvQmWtyEm/+B5/h
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d582337007bf398317b675902fc41d8d296036c1453731faac235ade55e1a628.exe"C:\Users\Admin\AppData\Local\Temp\d582337007bf398317b675902fc41d8d296036c1453731faac235ade55e1a628.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
444KB
-
Filesize
444KB
-
Filesize
312KB