Analysis
-
max time kernel
73s -
max time network
75s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2023 19:39
Static task
static1
Behavioral task
behavioral1
Sample
Sony Vegas Pro 13 (parche).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Sony Vegas Pro 13 (parche).exe
Resource
win10v2004-20230220-en
General
-
Target
Sony Vegas Pro 13 (parche).exe
-
Size
878KB
-
MD5
b932ec254b999d192fe4ce8e1c0c365f
-
SHA1
10f0341426298cfe8a09d9d28b4017910f70c6f8
-
SHA256
e4b70283ac7bf50bc038f501ff19343c111bf1246b3e5e75744a736745ed22a5
-
SHA512
178083ca261c10547173d34d0b03450a589b6b47c1f44793da692c8ccfcec5a84dbd5568dba3b3bf2e7903102e2a8690c49dabd0c7c7cfb3c40f170e4b7403cd
-
SSDEEP
24576:DN2HQ0764L6vyqJWBRD0yKVfQHb6YTUd:Dh0Wm6vmvwyKCeL
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 3756 Sony Vegas Pro 13 (parche).exe 3756 Sony Vegas Pro 13 (parche).exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4272 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4272 AUDIODG.EXE
Processes
-
C:\Users\Admin\AppData\Local\Temp\Sony Vegas Pro 13 (parche).exe"C:\Users\Admin\AppData\Local\Temp\Sony Vegas Pro 13 (parche).exe"1⤵
- Loads dropped DLL
PID:3756
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f8 0x4e41⤵
- Suspicious use of AdjustPrivilegeToken
PID:4272
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
-
Filesize
580KB
MD546903044827c806ef6ddb14d2772da69
SHA1098cae42813df526ece9dc0fcfd9d0f515b5ad47
SHA2568dfe47d2805b0904b1bee5e94bfe52a05c8e6de3ebcec5e13a986dff85511aee
SHA5120b8a2a090c46c7fa970eaf7ccbead69c0516f80cd03b67074650966202676aa0f40216c62c98526654bea7fc9592ce173862e9708aed5934beefde8b33dd9ac2