Analysis

  • max time kernel
    136s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 11:16

General

  • Target

    16f18a717f67cc18f38e84864e3eb815.exe

  • Size

    25KB

  • MD5

    16f18a717f67cc18f38e84864e3eb815

  • SHA1

    ef9a89f5deeeb01548a8a1c38d9977782a20cc42

  • SHA256

    7f7b2bb78aa88e2cef294c63f307d87833d9b6cc4ed703cd4b8519b94a3d1e86

  • SHA512

    4bf2524a60efc4f2eb76fca4fb681532ba3fcd791aeb82649f81f62dcee3388c4cd0e8068d2aad196cbf5aa8617f2a289548df7e754fec34ed591d9317a46613

  • SSDEEP

    192:WEviq2yCGSC6V/YJs0nuVoeVqFoc97O0EpmOwTimAuw2n8bK2VxI4XU8bhruooZG:WA5ZOzoFbVOSNRKHW4XU8dYeHipIp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\16f18a717f67cc18f38e84864e3eb815.exe
    "C:\Users\Admin\AppData\Local\Temp\16f18a717f67cc18f38e84864e3eb815.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\showthread[1].htm

    Filesize

    16KB

    MD5

    68c97313700d0fa2eeb2107b80d40de1

    SHA1

    a55e84ee183dcbe4cf259048af6496867f994163

    SHA256

    be596f00859d1b3a577f80590d444ad8d50496205ca18cf4c5252c1acb61cb10

    SHA512

    c13769a58dae2c3df608fcb088f5e02d4f792cc42cdf2562663ace795e183febc8c431b4efcc5e3b1a8d21576ca479b9b8fba214329f7cc423ef85e459219ac5

  • C:\Users\Admin\AppData\Local\Temp\~!#CAE1.tmp

    Filesize

    16KB

    MD5

    1e61b2de6d51ee2d67222fd5ce4e3445

    SHA1

    b5239852d58baaaa8ba722d553bbc963b26f2161

    SHA256

    6bf5481d9a77391aea97f6ad8c42fa814e42422276ea38043c75fc2ad405809d

    SHA512

    0656466b621c65d9829e3aca9c92be541d14ae20e46377407e11db0594def1e346e88bd208b22efb92eb30bb5dae4c727e11d89f812243420722fcacfce51e29