Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
21-10-2023 13:38
General
-
Target
d89b2b7463e920b2c051a4fea652baf8bd398454b498a50bd9470f7fd99bfe31.exe
-
Size
12.1MB
-
MD5
3ecc37c345e2cd48d006c646a8b06281
-
SHA1
e7d3cb94eaf72ea7b5e836c1c1fca1b7d00eba3f
-
SHA256
d89b2b7463e920b2c051a4fea652baf8bd398454b498a50bd9470f7fd99bfe31
-
SHA512
2ac1d013abe13e3c4ae633ab1ffdd076dc235aea80553524bce022b1c063885be922c8a620d83354a222398b038f5d3d32b5a551a3d0f7448632bc6656e89a2a
-
SSDEEP
98304:VOQn27OrepJm9sOLJk9sOeMTbsopSxp6cPk1pfdEmQw1eqyZC6a8lSJBAUZLrxRz:lnjqqLJK6MhpW0KYeqy5SJV3xRqby6u
Score
6/10
Malware Config
Signatures
-
Drops desktop.ini file(s) 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 19 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d89b2b7463e920b2c051a4fea652baf8bd398454b498a50bd9470f7fd99bfe31.exe"C:\Users\Admin\AppData\Local\Temp\d89b2b7463e920b2c051a4fea652baf8bd398454b498a50bd9470f7fd99bfe31.exe"1⤵
- Drops desktop.ini file(s)
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.1MB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
488KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
12.1MB
-
Filesize
12.1MB