Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
23-08-2023 08:40
General
-
Target
96d0bed0105da707b70c4c8446cccadca6b601e271d4f0d61784f836b3538fdc.exe
-
Size
8.0MB
-
MD5
6e8568f9b88b903dd797559f17b8ac9c
-
SHA1
a5d02b5b6f52f4c664c0e29c1576db6f9927811c
-
SHA256
96d0bed0105da707b70c4c8446cccadca6b601e271d4f0d61784f836b3538fdc
-
SHA512
818f6dc547c246a6e1ae05ae15caf66ddfeb9b9527ff0783dd51340a0a479fbe3394f7fcbe03501af2421a5b6e1f79e63ea5442d90d8801d81ab4b8d26bf25cc
-
SSDEEP
196608:P9GnCxosx3mWucFVAKAptnaqpp6JUxoU5GEIr2u:ZLx2cwKUaqppf53Ip
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\96d0bed0105da707b70c4c8446cccadca6b601e271d4f0d61784f836b3538fdc.exe"C:\Users\Admin\AppData\Local\Temp\96d0bed0105da707b70c4c8446cccadca6b601e271d4f0d61784f836b3538fdc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4cc 0x2f41⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
960KB
-
Filesize
960KB