Analysis
-
max time kernel
140s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
31/05/2023, 05:04
General
-
Target
fb8e6d905fa4f3f6963606cb0afeacfcc0a7595fe044cfd1b5f9b4e3f6346ca9.exe
-
Size
1.3MB
-
MD5
6036ec3ab61b15868ff49a7ec40b1717
-
SHA1
95e048692a702dfa4e8c6f77625152b86e9fe72a
-
SHA256
fb8e6d905fa4f3f6963606cb0afeacfcc0a7595fe044cfd1b5f9b4e3f6346ca9
-
SHA512
4ecc621dcd16bb505187b78d30c4a82aa526b46c451411dc0906adefb5923a313199ccbd81d2aed30a816e6b7e6140de315dd415df58c32205922f629457eeb1
-
SSDEEP
24576:BgsztzEnErqyFloCC5aYdULpQT+2UzaPKJE2GE+ktqJTEf+Lkbpw:6scEPFl6aYwuKaKJdftqNU+gtw
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 16 IoCs
-
Suspicious use of FindShellTrayWindow 7 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb8e6d905fa4f3f6963606cb0afeacfcc0a7595fe044cfd1b5f9b4e3f6346ca9.exe"C:\Users\Admin\AppData\Local\Temp\fb8e6d905fa4f3f6963606cb0afeacfcc0a7595fe044cfd1b5f9b4e3f6346ca9.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.8MB
-
Filesize
12KB
-
Filesize
4KB
-
Filesize
4.8MB
-
Filesize
12KB
-
Filesize
4KB
-
Filesize
4.8MB
-
Filesize
4.8MB