Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
13-02-2023 18:21
General
-
Target
ReksFN_launcher.exe
-
Size
11.0MB
-
MD5
8e3988bdb5dba0a76ea03743d6f7271b
-
SHA1
6c72238a63e1bfb3968ac5f8184c9cbd36646de0
-
SHA256
6150103d7e7d41af7f721e6623364abee19cf36ab27adcf9a081c22a3f24baca
-
SHA512
a48bdea9757d0d21d7990e55951f89fe35ed1ff02c6e911936506f3f985f45872fd84adc55f971817d3335263e4d3d129b41dadf1f5dcdf20c3e842fa276b481
-
SSDEEP
196608:kSuOXPzRC8Aiga3IvJwIvKyRCD3gUulSXPvtDEf7YND3ldDkufm:HTFCdTvKR3gUuEX3uYNlpfm
Score
1/10
Malware Config
Signatures
-
Modifies Control Panel 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ReksFN_launcher.exe"C:\Users\Admin\AppData\Local\Temp\ReksFN_launcher.exe"1⤵
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.0MB
-
Filesize
152KB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
6.2MB
-
Filesize
136KB
-
Filesize
744KB
-
Filesize
104KB
-
Filesize
216KB
-
Filesize
6.5MB
-
Filesize
600KB
-
Filesize
136KB
-
Filesize
408KB
-
Filesize
5.6MB
-
Filesize
120KB
-
Filesize
296KB
-
Filesize
408KB
-
Filesize
5.2MB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
56KB