3f0f8a01b232b3354547ed9f8c146e3e88c004c829bd71b75b867ca57d9cd96f | Triage

Analysis

max time kernel
143s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 08:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5e793427ffef9de1bc619171e3af346c.exe
Size

91KB
MD5

5e793427ffef9de1bc619171e3af346c
SHA1

e0755418b58858b876c3561350b6b1c8e66f76c1
SHA256

3f0f8a01b232b3354547ed9f8c146e3e88c004c829bd71b75b867ca57d9cd96f
SHA512

1bb7469dd486420eca119e8f7d0b72649d9a4b415aa0cb121ccd493acae5a63d32ae2afb5675e7ce542aa2d5a4e8fab84c5e01030cc66e478b3c57305b2eec7a
SSDEEP

1536:EGwtRcOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFNs:NwtRpnyypexoiNtxYGm

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1388	5e793427ffef9de1bc619171e3af346c.exe
1388	5e793427ffef9de1bc619171e3af346c.exe

Suspicious behavior: MapViewOfSection 1 IoCs

pid	Process
1388	5e793427ffef9de1bc619171e3af346c.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1388	5e793427ffef9de1bc619171e3af346c.exe

C:\Users\Admin\AppData\Local\Temp\5e793427ffef9de1bc619171e3af346c.exe
"C:\Users\Admin\AppData\Local\Temp\5e793427ffef9de1bc619171e3af346c.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
PID:1388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads