Analysis
-
max time kernel
42s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-es -
resource tags
-
submitted
07-02-2023 16:35
General
-
Target
MultiMC/MultiMC.exe
-
Size
8.8MB
-
MD5
b140f2eddebb8f56f15148d64c762c2e
-
SHA1
966df1c26fc4f42657549cc35ce5012b9feb09ab
-
SHA256
798898fa1695d4144930e58d06529c76235248fd4912531224f57709e2b9466a
-
SHA512
e81588e459c9557e5b8b37d57b0b1b9b48b969b390891d7b709271c4161b1dcb3ed03b6210ec8a82a19047e27bab791804b243709369cbebefd5e045b4b7717c
-
SSDEEP
196608:F/cYoNpdLZMSv80t/HC+ReI3MhcdyyVfzxXz+5EoAT+SZpVJV0V8eJiVPVVOSBVs:+3XoM/H9FXz+6gkVJV0V8eJiVPVVOSBe
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MultiMC\MultiMC.exe"C:\Users\Admin\AppData\Local\Temp\MultiMC\MultiMC.exe"1⤵
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x1a41⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
5.2MB
-
Filesize
6.3MB
-
Filesize
196KB
-
Filesize
112KB
-
Filesize
252KB
-
Filesize
8KB
-
Filesize
5.5MB
-
Filesize
112KB
-
Filesize
196KB
-
Filesize
252KB
-
Filesize
84KB
-
Filesize
96KB