Analysis
-
max time kernel
150s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
23-11-2022 18:43
General
-
Target
0c4dddb1bcf953c6b30ab95f369f729866c1498ff6e95210e96e487803b0982f.exe
-
Size
99KB
-
MD5
5359860b30561a31ac838f9681c50ab0
-
SHA1
53d709e8ac74918ed7814b15ce9b99021b2518a5
-
SHA256
0c4dddb1bcf953c6b30ab95f369f729866c1498ff6e95210e96e487803b0982f
-
SHA512
c3a86b6c0a04321c314ae54372db340150b17d38f72bb1060664bd2fa20052f8b809d8327ccabcfeb7501344c1613077e10f1c394fc77a6c0d25df4b3606582b
-
SSDEEP
1536:6dgddGCHwSudzrfr18+C6nk5paSFmHNlRe5IREzpdOwloxrfkwl+qcWwD3F8xJ:6dUQZfre+fSemIR2pkwloxs8FfA3oJ
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0c4dddb1bcf953c6b30ab95f369f729866c1498ff6e95210e96e487803b0982f.exe"C:\Users\Admin\AppData\Local\Temp\0c4dddb1bcf953c6b30ab95f369f729866c1498ff6e95210e96e487803b0982f.exe"1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\AD4946DD.exeC:\Windows\AD4946DD.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
99KB
MD55359860b30561a31ac838f9681c50ab0
SHA153d709e8ac74918ed7814b15ce9b99021b2518a5
SHA2560c4dddb1bcf953c6b30ab95f369f729866c1498ff6e95210e96e487803b0982f
SHA512c3a86b6c0a04321c314ae54372db340150b17d38f72bb1060664bd2fa20052f8b809d8327ccabcfeb7501344c1613077e10f1c394fc77a6c0d25df4b3606582b
-
Filesize
330KB
-
Filesize
8KB
-
Filesize
184KB
-
Filesize
330KB
-
Filesize
330KB
-
Filesize
330KB