Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
11/12/2023, 15:43
General
-
Target
ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe
-
Size
55KB
-
MD5
805a081e8c228745bec313d2465f335b
-
SHA1
619d856476a7f97f847a11c894be0c30f73ee484
-
SHA256
9eba94a32004927781aae20ddce4940bf4b8673f0deb6294dda2a8578c51a486
-
SHA512
e9cd6dd0a1c790909e5f38039720049dc509229b79d5c2b9d7807cc81a0b2ef59fa9e270d2121ae6897393aa217526ba9352e973eddf063c45176ce86c0e167d
-
SSDEEP
768:2YcjHgagv5yprtup2pW7Q3Nc7TPJqMFBzaTUFfvMeaAz7rBLYhmjsK4pyNsxfD:grgvitFp3MWTUZNaAXdLYhmjsKsy6xL
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe"C:\Users\Admin\AppData\Local\Temp\ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB