Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
14-06-2023 06:18
General
-
Target
7660e27373eddbf82fee79ac5838842e96eb27f677a733a3dfc467f221f62c22.exe
-
Size
508KB
-
MD5
223fa5bc526acf4e31c21f1eacf08f23
-
SHA1
0297e7e9934185150f98f20d5c59e481fb01a817
-
SHA256
7660e27373eddbf82fee79ac5838842e96eb27f677a733a3dfc467f221f62c22
-
SHA512
24861dbf9e719b5b67d3fd7a606135fa7daeaa907bbcaf3f670eebbd551da63762588281fdd57e1a9d863efa702fd806defd0a295c258100c90324ae61b3460f
-
SSDEEP
12288:Z8DSlNIUS3uqIUOjtZlPM18xIR0VhhSePmAUbqS2tn5PAhCJgyDX:wwOUSeqOjhi28pNbqSSmsv
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7660e27373eddbf82fee79ac5838842e96eb27f677a733a3dfc467f221f62c22.exe"C:\Users\Admin\AppData\Local\Temp\7660e27373eddbf82fee79ac5838842e96eb27f677a733a3dfc467f221f62c22.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\dnscacheugc.exe"C:\Windows\system32\dnscacheugc.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB