Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25/12/2023, 03:51
General
-
Target
03f4649f863d01740eb39d8ae82ea7ab.exe
-
Size
532KB
-
MD5
03f4649f863d01740eb39d8ae82ea7ab
-
SHA1
a7c92ba4911deea86d6ab5791234dc27e896afec
-
SHA256
5faa16b52c8c2fd867faf5f4213c93c8918821e990872fd4335644fbd92b0903
-
SHA512
a4660e091de8c838eedbef59987062d8da4dccf3a1bd2b11ca2c58d96ef3232484d0f0cab032f444b5ec02a71be36dcbedc0ced52598b561a819b3ea9885ae0b
-
SSDEEP
12288:+ZUuLe5/JtvB1Y3DVlTHk1d8uzjvVLGmm8gh:+ZDLe5hpByHumufvVqb8gh
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\03f4649f863d01740eb39d8ae82ea7ab.exe"C:\Users\Admin\AppData\Local\Temp\03f4649f863d01740eb39d8ae82ea7ab.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x524 0x5341⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB