Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
-
submitted
24-11-2023 12:42
General
-
Target
ClipUp.exe
-
Size
1.1MB
-
MD5
84a88222c6a952e49e90f36e8a2b05f1
-
SHA1
34c60e6296ed3470be565bb2d52b3077e39b222b
-
SHA256
1997c04607ce332cb150cc82d9dbfeea22c123b629b3d6978a4db567495f0940
-
SHA512
0bef12287d2f1d57073e1ec88db70f227f5185a938e91c4c0661acf326aca623514cfb279004bd3eb2bf2f68a0b476f3296ec6f05753a0e56e40eddd4394b2dc
-
SSDEEP
24576:G5myWJUZxm1SYy9VL6lK92ZrZDrTeIuqaqLyAflD4ugp4NF4RS7:G5VWJUZxm1SYy9VLkK92ZrZzXaqLyAfB
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ClipUp.exe"C:\Users\Admin\AppData\Local\Temp\ClipUp.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD55a8f6f1e597b23a7e9087e7e51aff400
SHA1dc7eef1501ef7cb1e4f9e450f48e554fa4238e6e
SHA256ae949f83d3a5c1933c779ec191f63b64a94e214dcc55179618b06ba4f2f5e14e
SHA5120ee4fb90dd4a85f0101b93c743f2a02226100559b67d699c761ec2d613e3ef133c9c09b9b360606535f9be6cfd98d9a81d8498078881d2684feb0ce4a8c50329
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB