Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
19/11/2023, 10:57
General
-
Target
bbdecfd9694ea1490ce3e64dd1c4aeebe641c79340cca1b2867630ae98b489d3.exe
-
Size
716KB
-
MD5
cd114aa72a8d5c70f25f9ae215d9d8e1
-
SHA1
a5d01a0eb394c514ed0ed74f64587af0a13b424c
-
SHA256
bbdecfd9694ea1490ce3e64dd1c4aeebe641c79340cca1b2867630ae98b489d3
-
SHA512
7b1a8e5fafa165d254e5c1c52c14f37c37b7ab3de2574f115b3220ce2f0b1e46b878b6dd9460ae2b5bc49db09237edc03fdc0461874aacf06c20bc7be38d8d03
-
SSDEEP
12288:7TP/aK2vB+j0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAN5L:7LCKAB3gXe4i7ojhsP5Lgrk1TWb4AN5
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bbdecfd9694ea1490ce3e64dd1c4aeebe641c79340cca1b2867630ae98b489d3.exe"C:\Users\Admin\AppData\Local\Temp\bbdecfd9694ea1490ce3e64dd1c4aeebe641c79340cca1b2867630ae98b489d3.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
736KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
736KB