Analysis
-
max time kernel
1441s -
max time network
1231s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
29/05/2023, 21:43
General
-
Target
SDIO_R753.exe
-
Size
4.6MB
-
MD5
cfeda33e8f043fba19fda4400869f066
-
SHA1
86b23205512a4c42726dc7afb90e5591b199fc54
-
SHA256
98c4a1b258f598a9193010c08dbb25840ba33083084b69665d29a9491b9dbfc7
-
SHA512
a53e59e8da6042427f7ede9e350d7966ccf8cb8fd7b20767a96f70997eb31d9e3f59c3d96a13ed921089da56fe04c39b84dc5612fe65ffdfebfe5b14634544e2
-
SSDEEP
98304:pcjmdvtXjj+CFQ9HAgE8DzXrd5b5E2AwsQrpG/+A1rx5XLyHFo84s:pcjsFXX+CG9fE83XrhE2RsQrHSrXLyHl
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 6 IoCs
-
Checks SCSI registry key(s) 3 TTPs 18 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SDIO_R753.exe"C:\Users\Admin\AppData\Local\Temp\SDIO_R753.exe"1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.8MB
-
Filesize
4.8MB