Analysis
-
max time kernel
93s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 12:55
Static task
static1
Behavioral task
behavioral1
Sample
fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe
Resource
win10v2004-20230915-en
General
-
Target
fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe
-
Size
1.8MB
-
MD5
c653d557ce55f225dc0d3a4b11a8e161
-
SHA1
53f9ecb877061d04339e67a5df30a726977a87bf
-
SHA256
fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f
-
SHA512
b8cce2dad8402e8de81e2b8e310fe50f8cd25c385a8883262559c12944c30aae327e8baa390908859b4e4b479f460bcb6bf811ef73114b972aaabde2ca974ce4
-
SSDEEP
49152:Dxm1tfiMesI5mlowo4Y9VxREGkXTzZTwW:MffiMej2owo77E5XiW
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2588 fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeSystemtimePrivilege 2588 fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2588 fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe 2588 fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe"C:\Users\Admin\AppData\Local\Temp\fb0b56c0f4ea095dfb9d9c7868ebeb3134fefe1b4aca3cd4121f62e55ef9f66f.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2588
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
MD5637c0d32e43d4017e252cfcd6239c38e
SHA13099b09a540c64e0b4f4b52ba9ee9ee485ed9054
SHA256e50a14c5ac46b40337cf1af741ac0c69eb586bd4f51a3f0e512eec9a0354b2e0
SHA5126ddca14e8adf2101d7a1f7d9c5d7b0292e64cc5e86a54fc086594399cbf778bef54e609c88230d4ce46bd72f27a76602a27226a94795648d600c41f1023e877e