Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
01-10-2023 02:59
General
-
Target
7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe
-
Size
10.0MB
-
MD5
b42ba04b2dffb672d276205f3aac5d6f
-
SHA1
72030ed397237c40c98c1d0aa9b6e7b4fafee23c
-
SHA256
7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948
-
SHA512
3112ae5ccf0748bf71530849ba099d6264de8c092cac93e074b3770ab1d37802bbc2e1ce3014937886889eebcf07ec659130ef0593bf7c9fd4c00a622fc6b3ec
-
SSDEEP
196608:s7E5ZaZq4g15kOO/L6NXSREbVSl3Po9QWLGqUOdt+WNt6CJdL0dh4vaz0:62z4h2iKbcl3QGX2RhAhz0
Score
1/10
Malware Config
Signatures
-
Modifies registry class 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe"C:\Users\Admin\AppData\Local\Temp\7e48c76c71afbfcaa038827206ad1e3b431f826187e8cd048c764e9daddb4948.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB