Analysis
-
max time kernel
140s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
20-08-2023 14:37
General
-
Target
e9ff848877955ba6fc2189f0aa894a4f7e94b849a4737c74c00972d6bb584a15.exe
-
Size
244KB
-
MD5
7f75e593d8e12a42825c20429b6402f4
-
SHA1
97df5a1ac43ad9857cf2be66eb4e4a32c7846984
-
SHA256
e9ff848877955ba6fc2189f0aa894a4f7e94b849a4737c74c00972d6bb584a15
-
SHA512
29ac0d1dbf51344b10174800b22415e3d0ad822b4a447a7e0b1b265f9556b939c0e331a9df84fbf13b4fd7017339fb3d6740bf474b775290bce516b2232b92fe
-
SSDEEP
6144:hh5cZAew9Ic9fquaP0LGMmWw8t33PKZKv0OT:eZiZM8L+Wtt33PsKv04
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9ff848877955ba6fc2189f0aa894a4f7e94b849a4737c74c00972d6bb584a15.exe"C:\Users\Admin\AppData\Local\Temp\e9ff848877955ba6fc2189f0aa894a4f7e94b849a4737c74c00972d6bb584a15.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
1.3MB