Analysis
-
max time kernel
136s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30/12/2023, 09:52
General
-
Target
1501fd0cd968b435d21b765968e94e05.exe
-
Size
2.0MB
-
MD5
1501fd0cd968b435d21b765968e94e05
-
SHA1
f8bf5bbf77028637fc0431e11667c151be8e49ff
-
SHA256
b62de0790e4eabac363da4586cd8954ad28229a83ad8c41b3c08387db676c416
-
SHA512
471a3996e417e834900c21c4d03bbd607f23642c61990a108228461e190363cce62e994a19e4c8dd72f42cc9d059c724ef17f9f39ff9f9e56093a6ddd4ba45ab
-
SSDEEP
49152:dQvcYNM8MdX7dvu7OhLDQWwzwSm4ZzcOLDFOuCYQmLsF:dQvxMdRW7OWzwSzZzEEs
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 6 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1501fd0cd968b435d21b765968e94e05.exe"C:\Users\Admin\AppData\Local\Temp\1501fd0cd968b435d21b765968e94e05.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
720KB
-
Filesize
684KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
1024KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
684KB
-
Filesize
64KB
-
Filesize
684KB
-
Filesize
1024KB
-
Filesize
684KB
-
Filesize
684KB