Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
19-12-2023 01:12
General
-
Target
115e548adcb17b7079eabf7988346fc57dafc98ed5a371be63ba72dd3184510d.exe
-
Size
2.3MB
-
MD5
12381e187f78be2110adaf171f8afef5
-
SHA1
14e05a79705b58262418a825a5c0588e9823b946
-
SHA256
115e548adcb17b7079eabf7988346fc57dafc98ed5a371be63ba72dd3184510d
-
SHA512
a63baafc02516807f7a7b8aec92c36ee7f04d60b3a1ce23896c08986b72eec2da9a078706fd7ec3a00b5f08fb0f986f39ceaee9a60c7544815578b83cca30f74
-
SSDEEP
49152:p5GJy5YYULFaatZKT3POnougfL8JMHT9ktH8PveUcKsjX3X3XYAGZU+:p8Jy5YXLoatZKT3/ugfASzK8XeUcKk
Score
10/10
Malware Config
Extracted
Family
blackguard
C2
http://91.194.11.85/
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\115e548adcb17b7079eabf7988346fc57dafc98ed5a371be63ba72dd3184510d.exe"C:\Users\Admin\AppData\Local\Temp\115e548adcb17b7079eabf7988346fc57dafc98ed5a371be63ba72dd3184510d.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB