Analysis
-
max time kernel
144s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
15-11-2023 11:18
General
-
Target
MPG123Wrapper.exe
-
Size
32KB
-
MD5
b4c773d55d4fa46a86c14344299e2ed9
-
SHA1
72c62bf289c206f9805ca3b26f9683a9d35181bc
-
SHA256
983542aad4a124e43fe73ca995af8678341b8e888efcaae5d7bc798ec04bcbf6
-
SHA512
cea9c8dbb89584ecf01d6aeff561dae474165494b0f731c5efd35905c61614769e5d4e861bea987c46b82ac934a495f38013003e4aed44e484e29d5e0d9988d1
-
SSDEEP
384:pSQ0emDWxvaFJJ4aWqXY83sIAKPuNYlGFAjCOAh:pR0hKxkWSY6AKPnl7COA
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MPG123Wrapper.exe"C:\Users\Admin\AppData\Local\Temp\MPG123Wrapper.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5d809b68f3d7217c8f439fa6104b39b85
SHA1d340c102a7f113aeb1657366c3c498aef0312203
SHA256cff75640077a7044ce5161376b9e1097493b14c70ea737b1eb13bd70b257e6ee
SHA512b778aab3b2c515704921487b567c7df462ce8e4d193130c4f9dbfd3a5ec344c726f67895022b57e5ffb281771ef541b00bcbef9b8778802c838436a3bafb364d
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
624KB
-
Filesize
4.8MB