Analysis
-
max time kernel
159s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 22:18
General
-
Target
calcprotected.exe
-
Size
222KB
-
MD5
fe7ca5731adc8c850f6fb00bd4885ab3
-
SHA1
caa28b33bff5190883fc3191ee12eab3244d644c
-
SHA256
0c2ca7617b33e7507f258f5422272b5c7b37975851d530ed0433601dc18ec627
-
SHA512
7f802868a010a78b878edf3fde8c01bbc91450a7eb54864737dde0b8ca0cff35ae5ec5eec16f36e7a1e245e05a124602eb0478af130718be5f40aad594594a33
-
SSDEEP
3072:zfNHGpcEi+8+5srC2Ut0ew1iQvg0KNqC7eAvZTfVWSxze+9eoWvvl4a1h6FGGBaZ:zQmEi+anZ1lvgnNIAvZhJzeBLvvlQGG
Score
1/10
Malware Config
Signatures
-
Modifies registry class 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\calcprotected.exe"C:\Users\Admin\AppData\Local\Temp\calcprotected.exe"1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
64KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
5.7MB