Analysis
-
max time kernel
153s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
26-11-2022 09:02
General
-
Target
2c6e63a2d367128048b73fde594c509b9cee39f89d81d8f3c1512a7777e22a57.exe
-
Size
420KB
-
MD5
140c256bfc0683adb84d71785610e2d4
-
SHA1
777fba4bbeba7c8fd68bb962436254eae4eb7294
-
SHA256
2c6e63a2d367128048b73fde594c509b9cee39f89d81d8f3c1512a7777e22a57
-
SHA512
fbce23ef5babd1785c6b3ab35079a5d99b9fdd9724425aee92ea9f7bd054ea920228c9947347056f9438a155a9c0a85698100a003b8eb634b8da467f9c3018b6
-
SSDEEP
12288:PlBelJGyZ8wlvJCMt7sCBI4vAJ1Jvs9P:90l4ydBCyK4vih
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c6e63a2d367128048b73fde594c509b9cee39f89d81d8f3c1512a7777e22a57.exe"C:\Users\Admin\AppData\Local\Temp\2c6e63a2d367128048b73fde594c509b9cee39f89d81d8f3c1512a7777e22a57.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
188KB
-
Filesize
420KB
-
Filesize
316KB
-
Filesize
420KB
-
Filesize
316KB