Analysis
-
max time kernel
142s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
20/09/2023, 01:00
General
-
Target
11123b96a9918c75704d35461f19496d9063a25c97ec7d40d7430a00a36e655b.exe
-
Size
3.5MB
-
MD5
d1d395cb1b5a180d5a8ed53dea74322b
-
SHA1
7ff18f98c05576b593bf910c95183984472ef376
-
SHA256
11123b96a9918c75704d35461f19496d9063a25c97ec7d40d7430a00a36e655b
-
SHA512
55345cf5c4c79b8c2686ca0cf51d9849a63db38fd597114ad558ddbb367f06131b7675f379f40d16461274bd2658cbf24d96d59324bd6c81ea4d1b6de6366481
-
SSDEEP
98304:QmYUuje4hHPnxHuZqm65bf9jzkbQfYUFK+KTUn5TJ5yNivnY:XuKGZH95TJMSY
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\11123b96a9918c75704d35461f19496d9063a25c97ec7d40d7430a00a36e655b.exe"C:\Users\Admin\AppData\Local\Temp\11123b96a9918c75704d35461f19496d9063a25c97ec7d40d7430a00a36e655b.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5031ad1ecd93701d39265771942ec716c
SHA1cb3ef507bf0e848894fbb96a29bfc94a0c302152
SHA2569a7fde2ea7883701bf858e0daef74d787a31c3cbd9f1171cec0a3a382ee9e6ba
SHA512374dab32b6304834c7acd8b5e6701ece016bf57d3abdd416ef2b63f7cbda24c9e59f9dfc27b6823ac6256bbab38aace74334dec7d57f1ef6cb9b80c239003bae