Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 00:27
General
-
Target
465ecf1b8e3475dfdf8b4608bf3286f7.exe
-
Size
520KB
-
MD5
465ecf1b8e3475dfdf8b4608bf3286f7
-
SHA1
7e765ca5ccf2b1c76d8a7e83f07666cf9fb2ca33
-
SHA256
e6b8845298f7d7fcb2bec58443656fc83dd6012be18a4066c1f1c47decda6040
-
SHA512
a63c5b2ccf247bcf1cf9e1c86ed99a729ecacf13992cdd8abfcefd9a05d7df9060d9934354305e0dc3b18b6c6c3a22b9918c5b58d276fad1d08f3462011f37b2
-
SSDEEP
12288:6GuWm0QRVRdgFkEXIc0pg3xTX2ep3vWQrWKB:Xc7dgadoTXFdeaW2
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\465ecf1b8e3475dfdf8b4608bf3286f7.exe"C:\Users\Admin\AppData\Local\Temp\465ecf1b8e3475dfdf8b4608bf3286f7.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x524 0x4c41⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB