Analysis
-
max time kernel
330s -
max time network
252s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
01-08-2023 19:56
General
-
Target
Hesi Wizard.exe
-
Size
10.9MB
-
MD5
bf3c451756a43859171f52ee6cc4c6bb
-
SHA1
1cdf792c9eefca3ffe1e4ffb3d71dd3d4ac2fa77
-
SHA256
d280e0a6db084523ad1bd21f1e2d790a05601769b17069e843f21efc087e7dba
-
SHA512
90e995cf73bdfe5138abfbcc1271712b412fadc839ac65ad01d2a1dadb8cd2ca794dbd1e1a0ee13951b350529050f7f9dfd993f5279cb7d0843c79bf66a71dec
-
SSDEEP
196608:Tan+8cRlEZWvO355TEbcRXfQVH2RSWsQPQJvCvHm9EVi9RGUiaWMxdT+Q46A/d7:Ta74qZGA5ZEiQVH2wxQjHmuiTz5jxRxt
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Hesi Wizard.exe"C:\Users\Admin\AppData\Local\Temp\Hesi Wizard.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5e95c4091280fe1a2700dbbd699594f60
SHA142996e1f78d0808364f70bd88fbf8ea3238a56c0
SHA256d80cdae9d5085171dfebe8acde843dc8452140e3c1fc49a4409ff0c3a10aafc1
SHA512a454fb077a53c31df94205c110d336e0b76a7f09feb6691edc68634fcd41aad91452116aefb804fe06cc609852d08f32e93595016a1b5661cf97447f98c5e854
-
Filesize
12KB
MD51ee0b946fe01ddb986e72c8f1be04233
SHA1e5605c198b463404a6bc0760b0b2f898451777fd
SHA25624b68203dea986b61dc5f6508601e3cd2f1716b305c60cf4617d79947c600116
SHA512b41644ff3b7469b5d7afc258d69be93a0d67b7c75e17a131f824ca3cdc3f939e7e08b6e988f0f2ca4db5e10a99629217e44c4ee3bdbe3a7767ac662ae34ba702
-
Filesize
5KB
MD54bf4bf875400761b80c5861fe9b9b222
SHA12d578d09b0db8d3e35ba4397421bf6be3a83fb05
SHA2565eb2c230a2338464f7d919eafcf4e365fa4050c0707b120c81ed29b7e1167521
SHA512c7f0de03c8e71a3fd0b6c627ab3b781dbfe39090a2c0ec2e5846d109d26528968f55049869b03d36eb555a3802015fd584bbd6ab75ef33af6978e8f7c16f808a
-
Filesize
45KB
MD5a95b32b298d91d1dd3e1540709a5d00d
SHA144ea18f0917dd36cd266a9142526fbebbad5da32
SHA256073c38c979b24ff9e86e456afbd0c1eb7d1e2f7ff83ebf6ec3e4bb4f9febcd98
SHA5127a57e45c660877c83eb1aca717949b5de13369b6864a06f381ea302e7ce658e0e13e0feb5c3f444d23c2b292565d60235a67d3b3ab99cd65c711e78ec3b04cb3
-
Filesize
10KB
MD526e4d401f7aa202ab784f2810c9fabb0
SHA1b27d4ff193dd6e32c5c0d5a330cec40e125aaa27
SHA2561a8b82b1745befa9e8f2d101a5feab6c159cb1f6ab2c5fc337d86d677c86cf3b
SHA512c28acad5dc5f8a69ce8a90571a6009b6df45236c1cf054f7202376529239c3076e0af001da5871aeb74a8472af806c882a0b5fd78d742b19efc92c2569de3834
-
Filesize
105KB
MD5db00409e98d259e16986abb4afc2a02c
SHA15ad508dd1a648121d8ac0237aa82f39ee2bef671
SHA256a5c393c03d48430e74768de97e0b1598fa087f624fb5b142a567a3e54e2ed853
SHA512fe490dc682264753b27e97ed28f9897f176e3ec55bcea5f6b37dbbb5696f79f236c6eda2cdfa653f3e9e8c762fdd61a4adb53fb7c45fa3fd95892110676ce51c
-
Filesize
83KB
MD5ae4ab1a5baae8106a95e1c24518b22c1
SHA107429ff9f0400a6e89a115877c0f429cdea4cbc7
SHA256f11597b472fa10bb7c3b85a99dd7870f063963a55740fa01d07f875b49efd328
SHA5124bcbb88cf5b956f87dfacf67bf049fbafec38bcf093e37b0d5a9816b612263ce50c0682bbbdcb7d8a667de7c6ef127e03c00e5669ac08ce101805007cbd6c961
-
Filesize
273B
MD58ff151a369eddf6dda30a0b009840c5b
SHA1955edcc6c4efc8df3d748e4756aee842572109b6
SHA256fd43a03364dbd3ba22f6676d2de28da0fed556ce8e9c49975502467f6518a47a
SHA512836ac9dead95e541390ce6932a4e1c8d93b56ae9e345b1c06401d137de6ea517e86f3e1229f94e004115ddf45aeb17abaef19e94a7ac026f5e8afa588ac4081c
-
Filesize
4.8MB
MD5bf87ef2fdc7cff63427318dc79412516
SHA1415eea5e2d709ac77aa43533d5283183d5eec526
SHA2560df0487c93e2a7a4f1e85c512c66de98d91dac85c91f49f4458c358606e95c57
SHA5129a7d19d14b70bd85f20329c6a40b37dd737c85650d70e7b239bdc5fff8fe10d60e4e2a7b306483dac5f15a0d46954e33401217a0ec9c3e508364d915e5f64f9e
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
32KB
-
Filesize
56KB
-
Filesize
224KB
-
Filesize
64KB
-
Filesize
744KB
-
Filesize
64KB
-
Filesize
11.0MB