04d6cd313a7e339953205075f0e5c970136ebe318936c93abee1464ab17d502d | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 05:40

Sharing

Report Analysis Logs

General

Target

103a2d8ff5c6cfdbbf3315dc59df861f.exe
Size

91KB
MD5

103a2d8ff5c6cfdbbf3315dc59df861f
SHA1

e9e6b62d32f538cd3af42a7da72366f33276f3ca
SHA256

04d6cd313a7e339953205075f0e5c970136ebe318936c93abee1464ab17d502d
SHA512

878d11959597f038ffb7f744129312a50dfdf31ed3d12bb0d02615f508866bf9d5f4daa67e1fa8fc7a5ba1e26160bded033ea5bbc57ee7a050656271adc3f16c
SSDEEP

1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFlp:NwtRonyypexoiNtxYGb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1664	103a2d8ff5c6cfdbbf3315dc59df861f.exe

Suspicious behavior: MapViewOfSection 1 IoCs

pid	Process
1664	103a2d8ff5c6cfdbbf3315dc59df861f.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1664	103a2d8ff5c6cfdbbf3315dc59df861f.exe

C:\Users\Admin\AppData\Local\Temp\103a2d8ff5c6cfdbbf3315dc59df861f.exe
"C:\Users\Admin\AppData\Local\Temp\103a2d8ff5c6cfdbbf3315dc59df861f.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
PID:1664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads