Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 05:40
General
-
Target
1036dd134fb887fda4c7fb39996615cd.exe
-
Size
37KB
-
MD5
1036dd134fb887fda4c7fb39996615cd
-
SHA1
0cd5a3a07ba1f4220bb0d089111fdcd1d85a3147
-
SHA256
6610d013010a2def0d40ce7b639aef29b1b5e80b1a220829d20747ec2ee631fc
-
SHA512
a9500e83da8ab8765ee9bcd7874eb7a48bcc0aa223d19067359d6da967ed2b231273665ddf5cf1474cb361b9bb127cd0983bdad4b6102a0b48124fa78674b060
-
SSDEEP
768:UWB0VnSQjdRnstngdLt17fgQFpxEINuCm:jehHSngR37oi
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Modifies registry class 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\1036dd134fb887fda4c7fb39996615cd.exe"C:\Users\Admin\AppData\Local\Temp\1036dd134fb887fda4c7fb39996615cd.exe"2⤵
- Loads dropped DLL
- Drops file in System32 directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31KB
MD5561758fc1589bc9ae311a2aa0f694105
SHA16d2bd0afb2b2d3c61d079a13604f40082c7757c4
SHA2561e4bc9b8105dc8c0b468da2ddc70264e29e703f772ad8e74ae7ac24ae4cd55f9
SHA512cef553bd5f6337fe99ec144eda04709413c61fd2b21cccc3ec1a79fc814a5ba0da4b83d039d081589354598e9c6523b63872dda5a1141b1680c12f581692b2ce
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
40KB
-
Filesize
40KB