Analysis
-
max time kernel
142s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
13/03/2023, 15:43
General
-
Target
Advanced Payment Copy.exe
-
Size
283KB
-
MD5
09409a080e319319e27445d6ae979715
-
SHA1
c4d53e4f165e9341b5562594abd995d808c90bfb
-
SHA256
a7496f64d8f6fedf5d7684e9b073afc39f7f0254ca3a35de6383445a9235329e
-
SHA512
3a044a2a6dad21e8342c51fa82ea96022a748e142af034d9d73f59eaa47d5e0e986aa0db3369ae8cf4a22e517a4df849680baa68862b907b8c3ea108835cc5ec
-
SSDEEP
6144:WuI5B5zVJAiZneXOuGpM1O27hDT9dCgebj/:WuI5B5zVJAiZneXOuvVfG
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Advanced Payment Copy.exe"C:\Users\Admin\AppData\Local\Temp\Advanced Payment Copy.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
304KB
-
Filesize
64KB
-
Filesize
136KB
-
Filesize
4KB
-
Filesize
648KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
64KB
-
Filesize
940KB
-
Filesize
64KB
-
Filesize
940KB
-
Filesize
64KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
940KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB