Analysis
-
max time kernel
145s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
26/12/2023, 12:47
General
-
Target
6fa0fdabc10063a05c854436a1776af8.exe
-
Size
202KB
-
MD5
6fa0fdabc10063a05c854436a1776af8
-
SHA1
e60b9c118b86d3e700aba66a9e455554dfbcd4d8
-
SHA256
6e6f63ef71a40b736c32b578c111338823b319b903434a2651f0d899ac012ee7
-
SHA512
124859249ab3e8acd77a81cf72ceed7e2cbb2aef72ae42ca6a4a7ac6c25eff724bb2ff587777d560b29ae7d688c94d04c4860e3564a40aa980e11b8b3897fdf2
-
SSDEEP
6144:tyCI4DsH7REE6NaB462duytQDRPgBDPke5Nc4:tyR447REE6YBQduytQ9P2Tk+
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 11 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6fa0fdabc10063a05c854436a1776af8.exe"C:\Users\Admin\AppData\Local\Temp\6fa0fdabc10063a05c854436a1776af8.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
596KB
-
Filesize
596KB
-
Filesize
4KB
-
Filesize
596KB