Analysis
-
max time kernel
121s -
max time network
256s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system -
submitted
04/08/2023, 03:41
Static task
static1
Behavioral task
behavioral1
Sample
7bef89cc8e6289effc89b9e45d621cd95793a58ce4b175bbdc90fc51ac68b912.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7bef89cc8e6289effc89b9e45d621cd95793a58ce4b175bbdc90fc51ac68b912.exe
Resource
win10-20230703-en
General
-
Target
7bef89cc8e6289effc89b9e45d621cd95793a58ce4b175bbdc90fc51ac68b912.exe
-
Size
181.7MB
-
MD5
50132b4d46daa06051dedb7b9612bdf9
-
SHA1
d273c08acb8719116869da05ab1967429be83805
-
SHA256
7bef89cc8e6289effc89b9e45d621cd95793a58ce4b175bbdc90fc51ac68b912
-
SHA512
ecfb1629329ee1825f8e6a9131f9dd4e28aa97d08b56a8a919e4c63f4ac8af85adb6b6dc8f68fb924f73ba013726dde999a4c7c9d571d6102cc1e3a01109da3b
-
SSDEEP
3145728:85FiQ9FiQ9FiQ9FiQ9FiQ9FiQ9FiQ9FiQ9FiQ9FiQ9FiQC:8mQyQyQyQyQyQyQyQyQyQyQC
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2767205360-3565838719-3800013281-1000\Software\Microsoft\Windows\CurrentVersion\Run\RegSvc = "C:\\Users\\Admin\\AppData\\Local\\Temp\\7bef89cc8e6289effc89b9e45d621cd95793a58ce4b175bbdc90fc51ac68b912.exe" 7bef89cc8e6289effc89b9e45d621cd95793a58ce4b175bbdc90fc51ac68b912.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4464 7bef89cc8e6289effc89b9e45d621cd95793a58ce4b175bbdc90fc51ac68b912.exe