Analysis
-
max time kernel
111s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
05/12/2022, 15:57
General
-
Target
17ac5fb9ffb739e922d4c8eacf07081c7824ddbdbbb2e307ed3804637397924f.exe
-
Size
361KB
-
MD5
06448f10697145e35b0d43a03eafed0c
-
SHA1
7abf2178fe05520a3899318d766c2db41534a699
-
SHA256
17ac5fb9ffb739e922d4c8eacf07081c7824ddbdbbb2e307ed3804637397924f
-
SHA512
b5d6585ba5fc6526e925c292ebcdff8f10a93c7de49251af511a1a88260a962219fea385d8f1e5d70e3a3d48001604b4ae59aaa6f79097bcc770e501c52ef296
-
SSDEEP
6144:O4ScvN931a9qbbPCsgENcmOJqBPyrLbzRYK5KdPZTPKA6lumn+iNqFaFgpZiTE1:bL31QRsBarJ2yj143TPKem+ik6gOTE1
Score
8/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 24 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\17ac5fb9ffb739e922d4c8eacf07081c7824ddbdbbb2e307ed3804637397924f.exe"C:\Users\Admin\AppData\Local\Temp\17ac5fb9ffb739e922d4c8eacf07081c7824ddbdbbb2e307ed3804637397924f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
904KB
-
Filesize
904KB