Analysis
-
max time kernel
191s -
max time network
232s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
29/11/2022, 03:30
General
-
Target
ab2cd3e911b9ea4f857e071de986a1b56321b37456d835afa48e137baf901a32.exe
-
Size
1.0MB
-
MD5
3ec9fc974722b187d42acbe766630891
-
SHA1
689b4475fdd53e014584cddcd8b26bf508ffdfde
-
SHA256
ab2cd3e911b9ea4f857e071de986a1b56321b37456d835afa48e137baf901a32
-
SHA512
94b1c7fd5f516fa6a13d6c2b88541451eb5a750203b5461ce47cad8c9ac873c36b6d33933f2248dd27f821db61b6403dae398633bd65010a52a73ca5e2bcefc1
-
SSDEEP
24576:l/zIeMF63UitXi6Mer0NT9DgkOWA0ZGFRk2QamA:lLBMFaUitXH0NT9rOWA0ZGLk2QjA
Score
10/10
Malware Config
Signatures
-
Modifies firewall policy service 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab2cd3e911b9ea4f857e071de986a1b56321b37456d835afa48e137baf901a32.exe"C:\Users\Admin\AppData\Local\Temp\ab2cd3e911b9ea4f857e071de986a1b56321b37456d835afa48e137baf901a32.exe"1⤵
- Modifies firewall policy service
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB