Analysis
- max time kernel
135s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
27/03/2023, 07:16
General
- Target 15ee5548d71ccdebb2f136ae93a15ce05c99f6cf1bcd569e78c5daf70847d871.exe
- Size 195KB
- Sample230327-h3thmacc32
- SHA256 15ee5548d71ccdebb2f136ae93a15ce05c99f6cf1bcd569e78c5daf70847d871
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
- Sets desktop wallpaper using registry 2 TTPs 1 IoCs
- Modifies Control Panel 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\15ee5548d71ccdebb2f136ae93a15ce05c99f6cf1bcd569e78c5daf70847d871.exe"C:\Users\Admin\AppData\Local\Temp\15ee5548d71ccdebb2f136ae93a15ce05c99f6cf1bcd569e78c5daf70847d871.exe"1⤵
- Adds Run key to start application
- Sets desktop wallpaper using registry
- Modifies Control Panel
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3152-133-0x0000000000D00000-0x0000000000D36000-memory.dmp
memory/3152-134-0x00000000057D0000-0x00000000057E0000-memory.dmp
memory/3152-135-0x00000000057D0000-0x00000000057E0000-memory.dmp
memory/3152-181-0x0000000001480000-0x0000000001512000-memory.dmp