Analysis
-
max time kernel
146s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/02/2023, 13:14
General
-
Target
SQL2019-SSEI-Dev (2).exe
-
Size
5.7MB
-
MD5
cd2f677bd174cfef132b4fec1c9bee7c
-
SHA1
685be7f19ed5331f1a48fab764713ac6c42a2118
-
SHA256
9e32a4babd2e90a4d0351a1c3209dfe3954e0b2a871a111e8512c65a7b9c21b5
-
SHA512
d1974bae9ced35909248c5fe8314b6da8cd09e09d17de275fc5249fbb981806332a7699c46d4cf83ccad785e7520d9a581b06fed8d37f5b0565c50dad263239b
-
SSDEEP
49152:jcikhejG29xzCm5BOjP7fG22JzQS3kmsUEl5b/EWahei:7jQX
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SQL2019-SSEI-Dev (2).exe"C:\Users\Admin\AppData\Local\Temp\SQL2019-SSEI-Dev (2).exe"1⤵
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.7MB
-
Filesize
10.8MB
-
Filesize
1.8MB
-
Filesize
5.2MB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
10.8MB
-
Filesize
1.5MB