Analysis
-
max time kernel
140s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 17:17
Static task
static1
Behavioral task
behavioral1
Sample
07f687cbfe9aca72b3c8ae96c8be0e94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07f687cbfe9aca72b3c8ae96c8be0e94.exe
Resource
win10v2004-20231215-en
General
-
Target
07f687cbfe9aca72b3c8ae96c8be0e94.exe
-
Size
382KB
-
MD5
07f687cbfe9aca72b3c8ae96c8be0e94
-
SHA1
1e0703c85594750f3b67a7e0788d150a05b13659
-
SHA256
244e27611e45d3fb829b8ddb85d3015b091fcfc50eb75aa09af960fb8dee7017
-
SHA512
d4c824e46d9006cb6f894f47b9de62a36567cc5360e499dbeec2da0028748f004a4319e0e8f7bfd81006561f1979bf08ac4c127123179bd0ff7b3490435d88e9
-
SSDEEP
6144:lSI5kqTzKQSzyQoR/M+634/ZaKszyR8Qbti28W/RYoP:hpTz9SWQoR/Mb4VszyRi29/PP
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 1844 07f687cbfe9aca72b3c8ae96c8be0e94.exe 1844 07f687cbfe9aca72b3c8ae96c8be0e94.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1844 07f687cbfe9aca72b3c8ae96c8be0e94.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1844 07f687cbfe9aca72b3c8ae96c8be0e94.exe 1844 07f687cbfe9aca72b3c8ae96c8be0e94.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
153KB
MD57f58671f6c21728902ae7a8d8f74e92f
SHA164a684d3d665d65069857cab7aa15ac00bac2e69
SHA256adc1cf33a04c23e17497782af2275e2f904a18e6caf203693ae5b6b7c3e8fa0a
SHA5120ae03e72e8bfdff53d107b393d652c2d63687cfa27721b2cccae7cdacccb96117d51ad766ecf7ae0f280ee96b628fc17bfe666761cd8fe174324904e80ff0860
-
Filesize
81KB
MD56f4fb57d93d07eb5951b5c003ec8a661
SHA17e0b24be392491ccab779fb3e50595f594e32e03
SHA25626d060d4a53d863255f0d437bd8b0f4bf2d70ba66d0521fa5c7f05ae3ac47748
SHA5120c404e25e80c6a8373824e2bbbfea78e9dc08b1356008ac86e3bedc6051f10ac4b56d0ba5b255c897230619c8f562a640865a39ef358143905b1bdbdd4d915d1