Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 08:01
General
-
Target
5e26b9aa10082d016f10bd4f2320545c.exe
-
Size
298KB
-
MD5
5e26b9aa10082d016f10bd4f2320545c
-
SHA1
b10231cc52a7149779824c0d177db1f575ba185a
-
SHA256
cb85c73c8944479c0462997e6128d993a392b7e89911ee7a75412e54a56b9d29
-
SHA512
81ee849a38e2f3fd5022a6fda127cf2afb87c505f2af54fd68833cae964bc33138e25e8544b449231fd6c57dc085c48a3813270db7d1f757b55757ce5f615a46
-
SSDEEP
6144:t5xfd2U/mObZF3B3ENAPKeqEEwosdc7g1Y9WJcLxw8:Rfd2UekdB3EyPKEoqIg1qWJct
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e26b9aa10082d016f10bd4f2320545c.exe"C:\Users\Admin\AppData\Local\Temp\5e26b9aa10082d016f10bd4f2320545c.exe"1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Internet Explorer\IEXPLORE.EXE"C:\Program Files\Internet Explorer\IEXPLORE.EXE"1⤵
-
C:\Windows\Hacker.com.cn.exeC:\Windows\Hacker.com.cn.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
796KB
-
Filesize
4KB
-
Filesize
796KB
-
Filesize
4KB
-
Filesize
796KB
-
Filesize
796KB
-
Filesize
796KB
-
Filesize
4KB
-
Filesize
796KB