Analysis
-
max time kernel
181s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
07-10-2023 12:05
General
-
Target
959f2f752933ba17956c68bde5b5721ad5c75c127455a07b4a234f1a98a8d716.exe
-
Size
4.4MB
-
MD5
206c06f51e1a9c49c7de5a77685f1bb9
-
SHA1
9659119ca04a7d95644388db4629d2409448bde2
-
SHA256
959f2f752933ba17956c68bde5b5721ad5c75c127455a07b4a234f1a98a8d716
-
SHA512
4722327f73359b7110e5a434f147e829d1949f1b75b8b6eef033f72067c96eee7e53a22fdc9bf0f0a0832093d025fa04f305252bb34398e4880332dcef50ba8b
-
SSDEEP
98304:O23D++KKtbo8QBrPgkPRcTe17Jdh0p1AhxYQ7wRGpj3:O29xQBrPgkPRcTyiMF9
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\959f2f752933ba17956c68bde5b5721ad5c75c127455a07b4a234f1a98a8d716.exe"C:\Users\Admin\AppData\Local\Temp\959f2f752933ba17956c68bde5b5721ad5c75c127455a07b4a234f1a98a8d716.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD52836d8ac0bcdda643c37eb68604eb861
SHA1fae6bc215acfa36e359e9e25ab187c208c5e2551
SHA256087abf9fe1e216552416dcbf2cbfee1a97215827457d5b941945569541324b9d
SHA5124ae9852614fa17d03ef48a9b3f5b74fd9ddad5a5883bebde9d92b0a281d940d6478928fa6057c9385a103420c9eb50a96cd3d65d187c289cb1a3a53dd87d9a26
-
Filesize
4.5MB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
4.5MB
-
Filesize
2.0MB
-
Filesize
2.0MB