Analysis
-
max time kernel
143s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30/12/2023, 01:44
General
-
Target
0a846e647aa2b0a354900f5d7d5edc28.exe
-
Size
1.4MB
-
MD5
0a846e647aa2b0a354900f5d7d5edc28
-
SHA1
8a8d8222683f50f6ee11bc05e6478cf2f2459e60
-
SHA256
0d27e9594437f34d79d0af33b336917c6606414229e2a3bcaea1a27a21623db2
-
SHA512
3d01d7fd52b8938e668cf022b72972a13250ceafdb1ab701255a99e4ead885a6e36e1b3c2fec572dd39689e3f5221c56154943854a4fb721e1b82b791178db7f
-
SSDEEP
24576:kmBMtc72o8oj0LuW9buUQXd3dNCiFzgx/Jc/Q2nvR7ipjTYC6BUETMtyzUYsDVa:kI78oKU1dciFMhJc/tvRijf6BU6MGeVa
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a846e647aa2b0a354900f5d7d5edc28.exe"C:\Users\Admin\AppData\Local\Temp\0a846e647aa2b0a354900f5d7d5edc28.exe"1⤵
- Adds Run key to start application
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
4KB
-
Filesize
4.1MB
-
Filesize
4KB