Analysis
-
max time kernel
151s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11-10-2023 12:15
General
-
Target
b3b0faf2f8ad5b902137dfdbfb185c45c3637d139af45c50ef6fdcb09073bb03.exe
-
Size
1.6MB
-
MD5
24860bd8364aef9a3be5c26910f51b1e
-
SHA1
05819ca983452b9795fdbc21274720c7355d89e6
-
SHA256
b3b0faf2f8ad5b902137dfdbfb185c45c3637d139af45c50ef6fdcb09073bb03
-
SHA512
353a724bf9d7f0c62152db8060f6ad03f72cceeb9230dc7e514f2a2ab3ea0fd61c997c44084d0a95d6bb2b4aee078c577c82594a09589320b522c3dfe578c359
-
SSDEEP
49152:XgGWQaAAZ4HEYKVxH1XvK3r6EQG3ad2VbFXT5XQ1:Yd4EYCXvK3WBH2jD5A1
Malware Config
Signatures
-
Modifies system certificate store 2 TTPs 6 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b3b0faf2f8ad5b902137dfdbfb185c45c3637d139af45c50ef6fdcb09073bb03.exe"C:\Users\Admin\AppData\Local\Temp\b3b0faf2f8ad5b902137dfdbfb185c45c3637d139af45c50ef6fdcb09073bb03.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
304B
MD50d61f97eb4cab0a412c1064622cf6571
SHA16a77073ed7958e7b184c83dab9646f3197484a24
SHA256830964e6166cac4bd85af70f1ed95f0e0f6c2e4033ca8229960b38054d5837ed
SHA512be71bf24ab5a8169ea9cad3dbe45416d1737c0ec2c259c22996abf4a6cc9cd400aaba0590789c472d0373dcf003b96146e8ee2ec37542a496d028402fabc8f91
-
Filesize
61KB
MD5f3441b8572aae8801c04f3060b550443
SHA14ef0a35436125d6821831ef36c28ffaf196cda15
SHA2566720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf
SHA5125ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9
-
Filesize
163KB
MD59441737383d21192400eca82fda910ec
SHA1725e0d606a4fc9ba44aa8ffde65bed15e65367e4
SHA256bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5
SHA5127608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf
-
Filesize
40KB
-
Filesize
208KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
512KB