Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2023, 07:51
Static task
static1
Behavioral task
behavioral1
Sample
ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe
Resource
win10v2004-20230703-en
General
-
Target
ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe
-
Size
7.4MB
-
MD5
02e6a94e84d5d18da59ff24677ee0208
-
SHA1
d2f8567317203baeeff7f8cbfb2bfb5c72fffd14
-
SHA256
ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9
-
SHA512
ad6f79d9e38a4b76ebb1d4a38aec6edf42cb7010038a6ead932ed7ba2c5d99c9c70e211bee54aa692a480b0a9246338df2262fd3622649d899398b0b355b7f29
-
SSDEEP
196608:BlJxXX2gY/jpiKWyybxaaVGeV/BV13rtWvev/JVq:Bl/Kl2bxXVGw1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeSystemtimePrivilege 3528 ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3528 ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe 3528 ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe"C:\Users\Admin\AppData\Local\Temp\ec109409cd522a4227b2fe34dde95726bf3eec0055f214a06fac6479280e50c9.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3528
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD59b0ac98df323f6201cb7b95a7878de7d
SHA104d8e70f7929d38173f0fdd1500eed69378d8476
SHA25607b91ec3dffdfc3b95a162cdfe2f478de65e41d7bbb3e2bcde312791d4c3018e
SHA51202d913d7f4130a0f6c5754f4e91f5cca0a93a14e5bd5d3879f0cc77921271cad9459f26b0f1cd31a6a0f7d169b390e2092e2150675829eac3ddb7bd3988cd76a
-
Filesize
1KB
MD5839b81845c9fdd2bbdae5ed0bed0ee06
SHA1f542f3c389132211787b936fd9c357386b3ff0cf
SHA2569f6e84ebacb080157b875683c7b7182bac770d42732895a4a733cd4a3ffcdeba
SHA512cf0974c5e0fe2b3ac775c1ea0b891a2cbecbdf49c5903ce6866367def0e8a9604620031a8e8f1371ef10997bd425364fcbe0b8b123eb32bcb14647194560e3da
-
Filesize
1KB
MD539dc0771a973aacbb2682126c50d7a07
SHA19315ebd88c35d90ffb8c66bafa71f66dde16e256
SHA256053c82e7e2ddb7bdc16a5ec8677408d48a724c1611efa1e07fe58b662675aebc
SHA5128d67bf6cf110c502ef71b93de80bcb11f3a671a6f3ff546410e2b51639cc67ced0e689b93893e768887d3d5828f491654a7c4da23dd866b6b0cfec66fabab90b