Analysis
-
max time kernel
31s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
09-03-2023 13:32
General
-
Target
decrypted.exe
-
Size
5.1MB
-
MD5
8272454ed737014f918c32cb607a5d2d
-
SHA1
d7353386a116dd030d3281299e5404496d2e5409
-
SHA256
77c7d9094f6fc139d8c00d1746de66c73c7376215cbfadcb1bd1ca66f4b978be
-
SHA512
1128f2e66dc974a0018c613dec6ba532237c3150d02225bb91690d23680d70dc7d84f5028c9fb5e33b4b94ebba06b31c1ae89075ddff19e51d8127d1d34e8287
-
SSDEEP
98304:tU7+HuSPLbBIAbslolCDdrX4PGlfe2TaVzeiL7T1MkXzHMR973uk:RHuyPGl22ThivTyesR973uk
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\decrypted.exe"C:\Users\Admin\AppData\Local\Temp\decrypted.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB