Analysis
-
max time kernel
147s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-12-2023 20:44
General
-
Target
3c2aba81c44f382099b969da3a8aac4d.exe
-
Size
523KB
-
MD5
3c2aba81c44f382099b969da3a8aac4d
-
SHA1
00bf01305133324e41d0ebe61e4131cc0d16dd6b
-
SHA256
5a1d53517410c7a62586884fdf6b0fe093ad584371afa14cf85f6b46b9dccf3e
-
SHA512
ec047463d1cdf16775070d9f96764f811f649512f52d95c06319af3032872335fa902b0f9f2627aad5a17dd3a4016a61c6b84558029dc7347922b82e429d9e65
-
SSDEEP
12288:dco6Ow7XzQmodZ/09D0WWJfow9c81ZyKv1dcJGdMFL1KJIdIZ:qDtURmD05JgmcgJYmMFi
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c2aba81c44f382099b969da3a8aac4d.exe"C:\Users\Admin\AppData\Local\Temp\3c2aba81c44f382099b969da3a8aac4d.exe"1⤵
- Modifies WinLogon
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
532KB
-
Filesize
680KB
-
Filesize
740KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
740KB
-
Filesize
740KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
532KB
-
Filesize
532KB