Analysis
-
max time kernel
289s -
max time network
295s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
23/03/2023, 00:49
General
-
Target
MSERT.exe
-
Size
110.1MB
-
MD5
a0a990f85d48bc26a5ccc795e24b280c
-
SHA1
fc956f1132c632ebad6d7a61f27f5898a798ab3c
-
SHA256
14c4dfd8a3acd826e03abf1f37aefc9714913592416c580e0d401fd10465c4e1
-
SHA512
fb0d0abcd0c928d67019a2dde70465545084b6d249d23a89911e7ebf3acc0c851978a63415cba33b31fdef340099ca2aced25c9f14e453df5f050d0c9565db75
-
SSDEEP
3145728:y5bVjSf2drH21SxnQz7Nm0vVuJRG7D2g4ttLzCp5:yV8faW1Sv0v6MX2ptLs5
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MSERT.exe"C:\Users\Admin\AppData\Local\Temp\MSERT.exe"1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
17.2MB
MD5ec179c691be83f8c71dd12f860e2a893
SHA197ab807501462a0a234a9f64033a75b63e9d9fbb
SHA256b92dbae2a7152d58dbe65a6fef9ec9c1df97cea04cddcfdee2f364a48164b4ea
SHA512f7dfaa45823478575569bb8e42eb5a6159895585089ea18e87dbc4d592494eb278f042dd3066392e5a570a6101ffde12877a9e71f188be24f9b1abd36a1d4a7a
-
Filesize
17.2MB
MD5ec179c691be83f8c71dd12f860e2a893
SHA197ab807501462a0a234a9f64033a75b63e9d9fbb
SHA256b92dbae2a7152d58dbe65a6fef9ec9c1df97cea04cddcfdee2f364a48164b4ea
SHA512f7dfaa45823478575569bb8e42eb5a6159895585089ea18e87dbc4d592494eb278f042dd3066392e5a570a6101ffde12877a9e71f188be24f9b1abd36a1d4a7a
-
Filesize
607KB
MD5a0c4ac6378ce0313955dccfd2d9208a6
SHA17ee2f0f3bf4504f4f7bbc63cb5fa883711c13801
SHA256abbe3285c58c830314f9f0ad2ddc769139c0d808e27893290adc69a535b996b1
SHA51272ea9f0d7399fa5d6865f3f887ffa07098b883b1428b33dcb552a40bb22ca6a461a546736667ca1aa97e5f06dffd10dab765c7f6e3e827dd0335b562b27d2fb5
-
Filesize
3.3MB
-
Filesize
6.3MB
-
Filesize
4KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
436KB
-
Filesize
412KB
-
Filesize
4KB
-
Filesize
788KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB