Analysis
-
max time kernel
146s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 08:10
General
-
Target
3Planesoft Coral Clock 3D Screensaver V1.0 build 3/3PlaneSoft Generic KeyGen/keygen.exe
-
Size
87KB
-
MD5
8500d40ae4a0d8966df2ca7a86c232bb
-
SHA1
3bd8fb739d9eb1545988c2d02f0314793e341cd0
-
SHA256
a3b6142bc83b97ac77dc52fbcd945f0413bb72a28f7475482b709ba3d7469b0c
-
SHA512
87127b91ed948e0e1f5ef930bd8d5d09330219284918e4a54825dbe93132143475ba057c9824103c08681e8670c6d6bff76199aa364af4b4a2f440f4601722c8
-
SSDEEP
1536:m278eOYuKpPbzp+nMceJH+kVx233L/idJGe0WqBgaPSLsdZa1XrHBATVZB:m27LOlKpT4Raef3LKDULBBPSL2Za1Xlq
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3Planesoft Coral Clock 3D Screensaver V1.0 build 3\3PlaneSoft Generic KeyGen\keygen.exe"C:\Users\Admin\AppData\Local\Temp\3Planesoft Coral Clock 3D Screensaver V1.0 build 3\3PlaneSoft Generic KeyGen\keygen.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2ec 0x4701⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB