Analysis
-
max time kernel
135s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03/06/2023, 18:09
General
-
Target
Update_obf.exe
-
Size
27KB
-
MD5
654177c45d80f2ae35345a8b787edf38
-
SHA1
f6a1a028186982e955e73f1968e05387d87368f3
-
SHA256
c110b4c3f2aaccadee51d7a2a5f5e732204f404148b444aae65a1056d8603872
-
SHA512
148be201ac783493abd7cdba2fec0f6aa595a7b53dced8b6618ec59c7306a8938bcd4e73ede61d1e2de89a18030ddb10d13d8cea8d4fa6866662b2ad1f9f68ce
-
SSDEEP
768:BkaeKNZRNmxSDdPgugPDv56zsFcYEKFGlyYdXa4P7ng0:Bk2ZRNm2gHl6JUY04P7nd
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Update_obf.exe"C:\Users\Admin\AppData\Local\Temp\Update_obf.exe"1⤵
- Adds Run key to start application
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
64KB
-
Filesize
64KB