Analysis
-
max time kernel
20s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
04/12/2022, 12:04
General
-
Target
f3f777b5bda582635cce2fc0570735537c8984ae60a112847e11737d6e31c062.exe
-
Size
27KB
-
MD5
4c2df24c9ff619a5f8c7f0ebe606477e
-
SHA1
97a7b77bae352edf7da5450a4870902ae2a154c7
-
SHA256
f3f777b5bda582635cce2fc0570735537c8984ae60a112847e11737d6e31c062
-
SHA512
8c3ab60fa61672251346b479c10791670b84f3f980be4c8a1c1038328f6483c49c24d17ebcc4cdcfeb86ea652fe7006582be4e2ec5f1eea85c85920951f74948
-
SSDEEP
768:4xSIioyAS81DtILfOFKMlIwNwPtGt8s7MxR15rOl0k4:sFKMlIBuhM715rU4
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3f777b5bda582635cce2fc0570735537c8984ae60a112847e11737d6e31c062.exe"C:\Users\Admin\AppData\Local\Temp\f3f777b5bda582635cce2fc0570735537c8984ae60a112847e11737d6e31c062.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4fc1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD58d56adca34e7fb2dfacfc5ea87b23ff9
SHA10e93ae841d7a1f9587655906847ddcfc3269d9d1
SHA25601742d6f3acdbaa65d5bfaaa62f97414d0c9a295305a526d089b34a06b6099b7
SHA51296ceab8b750dae2a8e42bc353c1dfb5c43b879675e0f7e70d34467deebc2f9833269d38a6dadd621c76cadd465aa59fba0535c88a79a9ad8ea092caca04e78ab
-
Filesize
8KB