Analysis
-
max time kernel
140s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
07-11-2023 15:50
General
-
Target
4c7a50c0a13a75cbb157c6c3cdc9b0a512303cc26f43cde3591894a8e35d78e8.exe
-
Size
1.3MB
-
MD5
78790d279b179ea200c54d3ce4f2beff
-
SHA1
186b81f7d8c852b81a1dc58bef09e8fc912f8bff
-
SHA256
4c7a50c0a13a75cbb157c6c3cdc9b0a512303cc26f43cde3591894a8e35d78e8
-
SHA512
163c004ca5b3582d01ac0dc9de7a1e673f2db70255220f61ec10bd1cb6f999a25058a7a6e4c7523530e318e8bc9898b1913d9eedbab799e984a608c8a09b4a79
-
SSDEEP
12288:V3P/aK2vB+T0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAN5L:V/CKAB7gXe4i7ojhsP5Lgrk1TWb4AN5
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4c7a50c0a13a75cbb157c6c3cdc9b0a512303cc26f43cde3591894a8e35d78e8.exe"C:\Users\Admin\AppData\Local\Temp\4c7a50c0a13a75cbb157c6c3cdc9b0a512303cc26f43cde3591894a8e35d78e8.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD508735051ce6a9b23604c4389fb622971
SHA130accf4a6a7bab9d03d5bc7257f08b573834ada5
SHA256f0f6b3a19cc20d156a8672a75992e8bdfb31306c1f22740c0e66f07c71aa8c23
SHA5123e70b03e030c1027123da97c9de22771711a382d2f3d562ffafaf50737a36aba1a670c02f75ba710a466b96ce5745aa6998cef0975372e8cde203b4bb73b9dce
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB