Analysis
-
max time kernel
159s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
27-11-2023 17:16
General
-
Target
Tracking#INV-IV1905-029.exe
-
Size
681KB
-
MD5
828636842c69b4e453f5735e77c89d36
-
SHA1
b1c928ed1f9926fc64cee98be211a5e77c9551b5
-
SHA256
1d2add4e6e6f86f45aa1a4b75c32e4efbf43bc117cc5b3a3927b4e548cf2732c
-
SHA512
64b8f4ad28fd005936898e4fc244c8acab8257e04a033459a8b463fb5171a814ab20c7d5933577ef10562b8adba35eb4addd1060d1f18ce5448cfeec32cdfeb8
-
SSDEEP
12288:OaiOid7BR6wTuHfH7eXkhH2iRr2nILMUrniYqW3WbKLrcPwp9euwjz8lIc2pvBpV:O1OipB+H+yR8VDvW3/cPwL3wj+i5pDmv
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Tracking#INV-IV1905-029.exe"C:\Users\Admin\AppData\Local\Temp\Tracking#INV-IV1905-029.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
704KB
-
Filesize
5.6MB
-
Filesize
7.7MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
104KB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
496KB
-
Filesize
624KB