Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
05-08-2023 16:01
General
-
Target
13466b8937f308d44a934e576cfc3075.bin.exe
-
Size
2.0MB
-
MD5
13466b8937f308d44a934e576cfc3075
-
SHA1
2c62e7187b10abcf18dfaaab72177e271b7a7b7d
-
SHA256
bc22a0e87e9ffae8c2aa04a35879be6f5fbef9da24897b9c00ea0fa28ae7a5f5
-
SHA512
b2a80e0811a6e6194388ca6d875e8e55b02c1151696f8641ab131af6be3b0931b4484da142ce313d65088ea15aaec625c47ca622912762b62b869553aab7c435
-
SSDEEP
49152:hkQTA2oTmoJqPuV24D7ViZRaQ6xn4px43Bo60mUgoe:ha2sRJ8uf3Vi+QY4px43Bo3mUgoe
Score
7/10
Malware Config
Signatures
-
.NET Reactor proctector 35 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\13466b8937f308d44a934e576cfc3075.bin.exe"C:\Users\Admin\AppData\Local\Temp\13466b8937f308d44a934e576cfc3075.bin.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
3.3MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
3.3MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB