Analysis
-
max time kernel
315s -
max time network
319s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
01/09/2023, 10:53
General
-
Target
Activator.exe
-
Size
279KB
-
MD5
dfc02d4120bbc6a109c068fb734ad40f
-
SHA1
f7e01dcb4f28364f24959b590af3ed4ade7b9a1a
-
SHA256
56d6aea38c4c18118bf084acc6313ff582572355b015953844776948b375c9a7
-
SHA512
15b930f964cee359e8b189b3e6f0265b6a201b0469da0a4df1076cabe1a11433e84ba2c93bef306f4a9ae9d20b11bdf3465727b5bb587e05802a7683747a9849
-
SSDEEP
6144:WHiT2HG6m+xM20eG7yWbZ39PkkzzkPQF7Y450GfJ:WH3vEFplh9xKkM4
Score
7/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Activator.exe"C:\Users\Admin\AppData\Local\Temp\Activator.exe"1⤵
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5101⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
704KB
-
Filesize
4KB
-
Filesize
704KB
-
Filesize
4KB
-
Filesize
704KB
-
Filesize
704KB
-
Filesize
704KB