Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 20:17
General
-
Target
3aca030e3a408473ea989e9310476a21.exe
-
Size
177KB
-
MD5
3aca030e3a408473ea989e9310476a21
-
SHA1
090cf843d4e4745618a632b937b9210064bfe3d3
-
SHA256
609eef08f6e33320511d8094b15bc421f2bf272cd68da479378b99cb9c80eeb9
-
SHA512
08abccd2f68b6eac3b1e5a5a0aeb70f7a2559f6fa4970483a5f1fb887f115323c3bb66b602f40102f1b935b90153992d9c4961e10ad62ccff47c873cc98a02f5
-
SSDEEP
3072:uC41B3fQhWSDdO9Ais0eBvC8BDdaj4D+hNQxyDIw0XCas:S1BvQhWSAAkeBvC8BDdajQyD90ya
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3aca030e3a408473ea989e9310476a21.exe"C:\Users\Admin\AppData\Local\Temp\3aca030e3a408473ea989e9310476a21.exe"1⤵
- Loads dropped DLL
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f4 0x4a01⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
508KB
-
Filesize
76KB
-
Filesize
12KB
-
Filesize
508KB
-
Filesize
76KB
-
Filesize
12KB
-
Filesize
76KB
-
Filesize
508KB
-
Filesize
508KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB