Analysis
-
max time kernel
152s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06-12-2022 16:47
General
-
Target
5504ed892e136abeadcb6eb132a542b4d3e5e84b59c7acb5fadd22fc5d137f6b.exe
-
Size
308KB
-
MD5
6c7e279b9298ea6c12e63c760b0a7a9b
-
SHA1
79976898c1b1298a58c787031bf23c626f09c122
-
SHA256
5504ed892e136abeadcb6eb132a542b4d3e5e84b59c7acb5fadd22fc5d137f6b
-
SHA512
18cb5c09151ace23bdad0c96569409501357083d1f2c63d2bfad1cb8930313c6b4b67298afcabb754506b36fd6c2c187e2abf6d3c5ae1d3499818967d89173d1
-
SSDEEP
6144:JRqmBKByO3a84W12T8WCW/rTd5APfd3WJpJBhniN0s0sFPYZgjVZC:JROOMQvCW/I9GROTv
Score
7/10
Malware Config
Signatures
-
Drops startup file 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5504ed892e136abeadcb6eb132a542b4d3e5e84b59c7acb5fadd22fc5d137f6b.exe"C:\Users\Admin\AppData\Local\Temp\5504ed892e136abeadcb6eb132a542b4d3e5e84b59c7acb5fadd22fc5d137f6b.exe"1⤵
- Drops startup file
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\explorer.exeC:\Windows\explorer.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
348KB