Analysis
-
max time kernel
25s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
27-11-2022 16:39
General
-
Target
0909iocp控制端/播放器/Play.exe
-
Size
397KB
-
MD5
4b22bade1e8520bf9bd0761dce3d2764
-
SHA1
237de3d72f89b62a4063e6368928e184052c5d8e
-
SHA256
bae32108ff418f222cc2f6f2ed924a4c9f309873b7cf71a986029af054c8481e
-
SHA512
9661c1f296ece04ee6004e6a57109940d70d1a06022d3aea7edd8e26eaca230e7b2e69a4baacb97513392c96c7f72b7386202aae83c669a1dc032f2608f19d5b
-
SSDEEP
6144:va98OISCZjsi5BIxGwB0Gbh9BSKVYv6uZF9AA9iD442CQUlzLyp5l:wIbZoizIxGM7UK2BT9AACQezLA
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0909iocp控制端\播放器\Play.exe"C:\Users\Admin\AppData\Local\Temp\0909iocp控制端\播放器\Play.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4141⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB