Analysis
-
max time kernel
141s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
15-11-2023 11:27
General
-
Target
Sourceforge_3998.exe
-
Size
28KB
-
MD5
56e4b9c493995baf2ef199ffef3f94bd
-
SHA1
fbda0a267f6ac748704d3b7c32f7c67ce4266a2a
-
SHA256
ace2f1d6d215cb6e1233d27a2d2d15199fc2c5ae7bacb187b8b546d3b17c5926
-
SHA512
48cd1f882f4c3e4835a67ae7aba24efa589cff7985f0a66d84379b5337f2298c29a84380400869d6a841d8cf2f4317e3b80bab524eea730fbfaf9636d638aa9b
-
SSDEEP
384:guyUxVIJrT6kw1lUp7aZhJUDsldyKEqyPIK8SC3sY75Y+wGIQlWqj8zf7V+y6hTl:guypT6kwrbvJUIlzEqS17mTVogUfTgt
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Sourceforge_3998.exe"C:\Users\Admin\AppData\Local\Temp\Sourceforge_3998.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5444fa8ce8da05efb9fb51383f9167de0
SHA10041245048c3a8337bbf26cdf39899b414114c40
SHA256a18822b184f0db8534548440b2ae6ec85ed9f4bbaa39eebf2cd5f639c3d032a1
SHA512c4fb432ee92be8d553e535824f96cc3231188f620edf49a06c2f05e6ca14cb3504082d9a3c0b24ccd66adba98f8ce82729ece6fb1173c989083940a298ba657c
-
Filesize
56KB
-
Filesize
7.7MB
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB