Overview

overview

1

Static

static

1

Lag Switch.exe

windows10-1703-x64

1

Resubmissions

31-03-2023 19:53

230331-yl4v2ada29 3

31-03-2023 19:30

230331-x7zyjaeb7w 1

Analysis

  • max time kernel
    103s
  • max time network
    108s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    31-03-2023 19:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Lag Switch.exe

  • Size

    4.2MB

  • MD5

    68ec8bb5b181d5d2506ff9f9476087a0

  • SHA1

    0e21f7d94fa84a724c62d2d547032750c9dad9f7

  • SHA256

    b6ac3f99fe3a7731b91ef8dc1b27be56cbb219fde1461327177ab0506615ff73

  • SHA512

    c4111d86b2d8b1bd0519793775957e41c2847aa09bc7ce0523c8d673eafc5e1e77133284483e33b228118f62a363f9197d2c21bbbfec7c2a91f402fd2de6aa5d

  • SSDEEP

    98304:gcHeOQR7OptGVCQ/s0OQR7OptGaCQ/sBcHKCQ/U:gqeOQR7OzGMQ/3OQR7OzGzQ/8qDQ/

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lag Switch.exe
    "C:\Users\Admin\AppData\Local\Temp\Lag Switch.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2504-121-0x0000000000820000-0x0000000000C5C000-memory.dmp
    Filesize

    4.2MB

    Download
  • memory/2504-122-0x0000000005BA0000-0x000000000609E000-memory.dmp
    Filesize

    5.0MB

    Download
  • memory/2504-123-0x00000000055F0000-0x0000000005682000-memory.dmp
    Filesize

    584KB

    Download
  • memory/2504-124-0x00000000055D0000-0x00000000055DA000-memory.dmp
    Filesize

    40KB

    Download
  • memory/2504-125-0x00000000055A0000-0x00000000055B0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2504-126-0x00000000055A0000-0x00000000055B0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2504-127-0x00000000055A0000-0x00000000055B0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2504-128-0x00000000055A0000-0x00000000055B0000-memory.dmp
    Filesize

    64KB

    Download