Analysis
-
max time kernel
149s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
26/05/2023, 14:57
General
-
Target
FST421093EI.exe
-
Size
690KB
-
MD5
1fef5cca8d70b176a2a4b8342e62c33a
-
SHA1
43dd70a96c51f47202c0c6428da5ed3c7f347140
-
SHA256
0684ef35b9709852487b04cd279d7518783a7143db7fd79f7a296a4147d7d61e
-
SHA512
f600d3dbfe66722de8c924ea2d3ac7544c225c38d06404de3951b9403ed1dea64dffe867dad5c1ccb391bce013a6a0481ebc5bb906c2285e83dcfc2e3793ec70
-
SSDEEP
12288:GFeAz6UA6QpKNHKxauI29lf6ZPrAdiBkCxUkDugORGRtM++j8O:cz6NSNHKxa329MkdiBvqgOutx+p
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 31 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FST421093EI.exe"C:\Users\Admin\AppData\Local\Temp\FST421093EI.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
688KB
-
Filesize
40KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
4KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
3.0MB