6c02318ae65496c8b178affa6cce80a195fd5c4c9c46e8f0f93fcfa252ba49cb | Triage

Analysis

max time kernel
121s
max time network
135s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:00

Sharing

Report Analysis Logs

General

Target

DNFMulti.exe
Size

49KB
MD5

ab03992456dd23b6e098915348cbb22d
SHA1

44ebfe95d637c76fb2efc3bc26f30f1ee7496b10
SHA256

1af96c65f3dcce17c97c8728953369f0d774d37ade76b957e5eee9b1291c9b26
SHA512

c8a2fc97220694796aca2653dfb821c427168bc67604b0e35322059bc26fee501c9abf73e7a54d21ebd93d6369ebcee0b44abc636840dcaf236f01537b1617ea
SSDEEP

768:FyA53WRbyBaWdTk56JOlOS33/F69wGL7sv/X:Q4KyBT+56kw79wGA

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2864	DNFMulti.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2864	DNFMulti.exe

C:\Users\Admin\AppData\Local\Temp\DNFMulti.exe
"C:\Users\Admin\AppData\Local\Temp\DNFMulti.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads