Analysis
-
max time kernel
145s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
30-10-2023 17:29
General
-
Target
4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df.exe
-
Size
3.1MB
-
MD5
45e4677379586dbe595232297d095271
-
SHA1
99413bca1143df223faa6bad5e776f6975cb98a7
-
SHA256
4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df
-
SHA512
63067ce20b2587d2f1268d85b3a71497dcfc39e831a363bf585daa2726f3897cc72877ca6d7b68b64d4d7103a1270ff13bd444537055ea2ae96757b5d327e445
-
SSDEEP
49152:Tfv/XRm3fUHv648igad1UUi9Gi2G+KXflCCygqH9T53/A1Nc3Wad:TH/b6YgafUT2GhtnIP/CO
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df.exe"C:\Users\Admin\AppData\Local\Temp\4e2ea508a06639416efec00d00180306b5e0f819bdf70cee1cd88acf901c04df.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB