Analysis
-
max time kernel
143s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
09-10-2023 17:47
General
-
Target
be046c790b6c622cd0a006534fbd33a69e3fe88f2446b433626e738c21482406.exe
-
Size
3.1MB
-
MD5
327dfc353e0816b35640c5d4852fda35
-
SHA1
d1f49ca20516a25ba55d310e14b2c085c8203bcc
-
SHA256
be046c790b6c622cd0a006534fbd33a69e3fe88f2446b433626e738c21482406
-
SHA512
eff22c0af8881c57c70127717c4f816d3eabd46a132c451d0991892b1e994d0facc5bc36579962535f0cd4903f083b9a7019d2da3b60cf6b0dbb51e7d9ac6bf6
-
SSDEEP
98304:dYhwAgL1/q9uUO6bugZF1VImIJdkMgxA1:daS1S9uUO6b3F1qfqu1
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\be046c790b6c622cd0a006534fbd33a69e3fe88f2446b433626e738c21482406.exe"C:\Users\Admin\AppData\Local\Temp\be046c790b6c622cd0a006534fbd33a69e3fe88f2446b433626e738c21482406.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB