Analysis
-
max time kernel
146s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11-10-2023 10:07
General
-
Target
733a6b07e6a6e78c4ccafb01e8310ffb9fd64c029a270ed0db8dbcb55082e555.exe
-
Size
6.8MB
-
MD5
9a13db9a1bbfff450b9a581b5da2c4ba
-
SHA1
93ed432b773e35c48f80ccfdfec81554a499c343
-
SHA256
733a6b07e6a6e78c4ccafb01e8310ffb9fd64c029a270ed0db8dbcb55082e555
-
SHA512
9174dc17db1f7ef3b9a9aaf8cb0923fdab9144ad5c68f884a3ece2e375ed7ec12d702f3b719adb8fa7553ef0a02ecfe401dc439da792ba2b40d0e081a18b9c3e
-
SSDEEP
196608:JEA0Dfm/Kteh6GSYP3hjr5iDgX4+RbN1uplmRH7pW:m3DPohkYP3B5iDgNhNM
Score
7/10
Malware Config
Signatures
-
.NET Reactor proctector 35 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\733a6b07e6a6e78c4ccafb01e8310ffb9fd64c029a270ed0db8dbcb55082e555.exe"C:\Users\Admin\AppData\Local\Temp\733a6b07e6a6e78c4ccafb01e8310ffb9fd64c029a270ed0db8dbcb55082e555.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
7.5MB
-
Filesize
256KB
-
Filesize
7.5MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
6.9MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
256KB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB
-
Filesize
7.4MB