Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
07-10-2023 12:16
General
-
Target
c921686af22ab6697f09e1dfd2903d0b6b7b79f93093499e86fd144bd9b312d0.exe
-
Size
1.4MB
-
MD5
125c0623b6fdf12dfac2190af81d20c4
-
SHA1
ea7353eeac74ddac96b53cc42e24b5c816f82c08
-
SHA256
c921686af22ab6697f09e1dfd2903d0b6b7b79f93093499e86fd144bd9b312d0
-
SHA512
b12c5b8ae71830fa5b1e4cb2ef9928b48f228ba4877fed45949ac5c3535570d54f2383afec1e96353e636106d1c9c8c407ff5e7d166ae9a5d76ad2d7ee15959a
-
SSDEEP
12288:27gKNkhm/JuyXnPB+h8WHuXI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:27zNkhm5PBX2743TvRk6NwG
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c921686af22ab6697f09e1dfd2903d0b6b7b79f93093499e86fd144bd9b312d0.exe"C:\Users\Admin\AppData\Local\Temp\c921686af22ab6697f09e1dfd2903d0b6b7b79f93093499e86fd144bd9b312d0.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD5957561a015d8a3729a813f5a163b396e
SHA1c6e070d58f47ee0651ac42372194e4fa310ab387
SHA25607aedcde0618f783d7ac8f766c2668977824c08a98f13daf96dc5ce25066dcdb
SHA5120d025e0d3f394c86df662a3f599962f6976c1e1887ef90177ff4710f9d538a9f413473f6e586b264cb81dcc8bdcd9a3a6ed7969887cbc7616591a1320f9c1c0e
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB