Analysis
-
max time kernel
196s -
max time network
212s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11-10-2023 20:19
General
-
Target
d9c3a254ca55c92bfb26b41a3ff115ff671748bc3c541519e5a224daa380f074.exe
-
Size
2.6MB
-
MD5
8e5447d0e4893e0febcd399dede65f58
-
SHA1
35aa168236fc72e01222852d013f5f759d59f356
-
SHA256
d9c3a254ca55c92bfb26b41a3ff115ff671748bc3c541519e5a224daa380f074
-
SHA512
21bac92c84ea6c3fa4e0eb541ba8390d3e6b5442cba9bcb7360f7f1df090c72181b94f9f4d3fe321dc97d5e41d2819d00a6ad73dd055f7dc6b523db3a4c7e81b
-
SSDEEP
49152:2TFKnwzSEpBrk8C33p8mTSRza2MifU9XAEcQaNXoTTazJJfqH2JY:GFHdk8M3p8NJZQS4HazJJC
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9c3a254ca55c92bfb26b41a3ff115ff671748bc3c541519e5a224daa380f074.exe"C:\Users\Admin\AppData\Local\Temp\d9c3a254ca55c92bfb26b41a3ff115ff671748bc3c541519e5a224daa380f074.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB