Analysis
-
max time kernel
156s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 01:28
Static task
static1
Behavioral task
behavioral1
Sample
b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe
Resource
win10v2004-20220812-en
General
-
Target
b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe
-
Size
329KB
-
MD5
415f9f7c54087ade20df068bb2fb20cf
-
SHA1
cf2df0afe498df08304ef6b11a6dd5e1fa572915
-
SHA256
b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8
-
SHA512
48a94af0e0f450bd671cd09a124100c664c1eaafe00b8bac2779b414aeae5d1330cb32841e037b787fdb0c3660546f115198ba8782081a4f22119c8feeb35f84
-
SSDEEP
6144:oFSJry9l99YeXc6ChVFvfdXpO8swhfLATHCYm+AKthZnysqDnVNRPwoxYrYBei6v:nY9l9Sxb9fd5O8JxL46+AaDysatwoxYV
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 3596 b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe 3596 b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3596 b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3596 b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe 3596 b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe"C:\Users\Admin\AppData\Local\Temp\b0669f246b4e457e8caa9ebceb29f48222fe699251f98d54ff4e460e527d26e8.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3596
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
496KB
MD5101253c625eb493e8370d2620e915146
SHA1263b79d7e28fbc52223ef817aea7f8b9a060e73c
SHA2569bab4695daa00369eb8023a872dc1cfbfc25af0ebb2607149e494ef94b332788
SHA512d1d479545c894c3565df740198a7e31866c0bb563c42a5b040c5670483ee5c18fffcc437643a1a79901bb1c2f255d009f27bae7d944b5e5366b59217db95bb7b
-
Filesize
496KB
MD5101253c625eb493e8370d2620e915146
SHA1263b79d7e28fbc52223ef817aea7f8b9a060e73c
SHA2569bab4695daa00369eb8023a872dc1cfbfc25af0ebb2607149e494ef94b332788
SHA512d1d479545c894c3565df740198a7e31866c0bb563c42a5b040c5670483ee5c18fffcc437643a1a79901bb1c2f255d009f27bae7d944b5e5366b59217db95bb7b