Analysis
-
max time kernel
143s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
18/03/2023, 14:39
General
-
Target
b290af5494ee28e77cf91a1708ef8e107ff0389509e581d2a16198d3542db62a.exe
-
Size
1.9MB
-
MD5
8bb62c137e5579831ce3c008967133a1
-
SHA1
2000be243b8a9a6cfe1fedc39a33b86bff25918b
-
SHA256
b290af5494ee28e77cf91a1708ef8e107ff0389509e581d2a16198d3542db62a
-
SHA512
027cace41c88bb313bc898de14193e62073e47056f5ba0053e6d16ab685f98054f27ecee092963e124fac385e74f42a774da62fad17f18c2b47d504ad2043480
-
SSDEEP
49152:AyLjIylGC+wzZAElWCaPbGZfkuR6C3bLQt+HObUJJGy:AygPC3A2WCaPusuLQt+ubUHGy
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b290af5494ee28e77cf91a1708ef8e107ff0389509e581d2a16198d3542db62a.exe"C:\Users\Admin\AppData\Local\Temp\b290af5494ee28e77cf91a1708ef8e107ff0389509e581d2a16198d3542db62a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
624KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
344KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB