Analysis
-
max time kernel
150s -
max time network
71s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
01-03-2023 04:36
General
-
Target
ea7a7b43678e881eb3fc2d64a54d3de8690a842f3fe1ca40cdab256e15824d1a.exe
-
Size
388KB
-
MD5
d6440255651366d1622fd0c32d298297
-
SHA1
27913ef1256dd10bac4ae4db696d037faa634797
-
SHA256
ea7a7b43678e881eb3fc2d64a54d3de8690a842f3fe1ca40cdab256e15824d1a
-
SHA512
4893537a2528781f25e764a6efa3f1bd9c223367e8389a4193bc23f4432cd61a8e9ee6e2f3c28ccc64911fa292db08d154544cbf996c65bf44766f066c9059a7
-
SSDEEP
12288:1Ov5jKhsfoPA+yeVKUCUxP4C902bdRtJJPisc2czyJ:1q5TfcdHj4fmbB5cz
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 16 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea7a7b43678e881eb3fc2d64a54d3de8690a842f3fe1ca40cdab256e15824d1a.exe"C:\Users\Admin\AppData\Local\Temp\ea7a7b43678e881eb3fc2d64a54d3de8690a842f3fe1ca40cdab256e15824d1a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB
-
Filesize
964KB