Analysis
-
max time kernel
182s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02/12/2022, 21:25
General
-
Target
7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253.exe
-
Size
209KB
-
MD5
d6529cc6041d7a80b0b69e42420b1242
-
SHA1
dc4de780ead9f585dd3c1818af8f0ec4b0e508d1
-
SHA256
7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253
-
SHA512
7f08f8dbd7fa4e3484f0eb9eb48a02706c454c82f98e5eccbcd525a82b203ac3d3ea587d63c6f4a3f65c0be16c3edf7c22792a4029552c7d86cbd8223945a31a
-
SSDEEP
3072:tjYOFZdahMAiVfXtB+lltpnNryrCVM4DkO1eqfG5qB3NP9:jZdfAkPi3nNLdkK3O5qB3NP
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253.exe"C:\Users\Admin\AppData\Local\Temp\7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
284KB