Analysis
-
max time kernel
142s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30-12-2023 13:24
General
-
Target
19e4c4f601f1459b6755776c7aec2604.exe
-
Size
556KB
-
MD5
19e4c4f601f1459b6755776c7aec2604
-
SHA1
71d8398652a891d09492db64bc1458349ba4cdbc
-
SHA256
9460ffe580332fe64bb4f35bb63dc6a4302f3613718a04dc0986cea989160039
-
SHA512
f3142590ecc73245295b1cf0f2b4188fa547f35adb2103efba55db8629c730727ac0beef73034950aec0e87297f7be1acfb2bcffc6b238c4386499356f527696
-
SSDEEP
12288:KsztnZfvdeneL2iNF2iNi4QissaMJcR/V:KspZF1j1esId
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\19e4c4f601f1459b6755776c7aec2604.exe"C:\Users\Admin\AppData\Local\Temp\19e4c4f601f1459b6755776c7aec2604.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
141KB
MD5e8641f344213ca05d8b5264b5f4e2dee
SHA196729e31f9b805800b2248fd22a4b53e226c8309
SHA25685e82b9e9200e798e8f434459eacee03ed9818cc6c9a513fe083e72d48884e24
SHA5123130f32c100ecb97083ad8ac4c67863e9ceed3a9b06fc464d1aeeaec389f74c8bf56f4ce04f6450fd2cc0fa861d085101c433cfa4bec3095f8ebeeb53b739109
-
Filesize
576KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
160KB
-
Filesize
1.3MB
-
Filesize
10.8MB
-
Filesize
160KB