Analysis
-
max time kernel
117s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
26-11-2022 11:47
General
-
Target
2014-12-22 #32/864f15a5f814d374bd36992bea448276.exe
-
Size
251KB
-
MD5
864f15a5f814d374bd36992bea448276
-
SHA1
87d5a371d967cfa068777bdea879539120b749fc
-
SHA256
8d1f926f80c53da9ea1ca7ab9d62cd06b49a46ee94d43f37309f951395455927
-
SHA512
36fbbe2568685e95bf3988994c7bba624f22d8c100fe89b9d6829ba87bd17a76a3f38a26dc2fa345a8335a9466578a24d855292d4502596ad50ab089fe328bb5
-
SSDEEP
3072:M1le6UqAYN076conxfvnM9dtQOGDzoiKxAdgbDxNyqStBZ0XyVivp9D:Ue6UqpU4ZvM5QLDNKqs9gVtf0XUivp9
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2014-12-22 #32\864f15a5f814d374bd36992bea448276.exe"C:\Users\Admin\AppData\Local\Temp\2014-12-22 #32\864f15a5f814d374bd36992bea448276.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.2MB