Analysis
-
max time kernel
169s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04-12-2022 13:23
General
-
Target
e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236.exe
-
Size
217KB
-
MD5
41f5a09c260f1c53f7d36077fbd61586
-
SHA1
3708764abb41ee06a7f3d78da8fd6144daa8c0d6
-
SHA256
e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236
-
SHA512
fcbb9cdd6ea5b7ebe6027222f50607932311cdd016b49c5d09c0b7c08b3dc717b8fcee81319092e144179a94132771829003a0fb8e481f8904227980ccc3ad0c
-
SSDEEP
6144:0bH3MhU6sM8fP6SPqRZto4fcvg+xh5Jfq:QH3MhU63SqtbX+
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236.exe"C:\Users\Admin\AppData\Local\Temp\e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB