Analysis
-
max time kernel
1721s -
max time network
1171s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 13:14
General
-
Target
SuperBoo-Protector-cracked-main.zip
-
Size
2.6MB
-
MD5
277c927bc2e7a1a8bb6c2fba0910fe19
-
SHA1
0faa50b172942693fcf79702943a5b03cf9550e9
-
SHA256
0adb6afe6f60b030f1447249a28677ab16b52189cbbf36cef48fed22d3ca2776
-
SHA512
173ef5090df469611b5b744f9bdb47a9efe67d3b2807f1f84421c00bb13dbf1625af1def705519ef874e259fd8c2abcda0b6eddd86c8e77e885e840bc9a5e667
-
SSDEEP
49152:edngwwHv5VbtHwNxR9Fl/uPugYadTKE1IEEV+FkcoJAN/bisZ8bQZyUlixtecKf:6gNhVRwvm1eOI5+FRgANDhZflqteF
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\SuperBoo-Protector-cracked-main.zip1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5635e4100dbf0d9875cdf3271702463e0
SHA1a0eed25b95b6b3dbe54707f99b3a020b6c4b1f6c
SHA25620fadb8eebe97af6bedacaa3b9452e1672f8cbe7861c500766cba7ec65b51af7
SHA512745ecfeecb550a5e4816d09c58407f86954804c91f962c06fdff805b7966ffb75d7437e4bc0dc4bc5315728a10911974df86a7c54774c402f416c556abb90255
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB