Analysis
-
max time kernel
3s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
01-01-2024 09:46
General
-
Target
ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe
-
Size
1.3MB
-
MD5
04987587e8f891e823ca06ede62e454a
-
SHA1
7d74167f4f3b63e26f104756e3d19984bac84302
-
SHA256
ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070
-
SHA512
23f42ae9725046de089217f1339ac5453c5faa2238c7794321de9ebacf22d0ecec9e2d433e9c216bcd04dab4fd688ec8c57c0be34b8b810841f73edd0f8f46a8
-
SSDEEP
24576:X6xN+8MWt5Qogm3rtNjR01iSGGvuBa4pyakDSVXT5X0vhA:X6g8MWt5Q3m3rtui3wuE4p1pXT5X0v2
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe"C:\Users\Admin\AppData\Local\Temp\ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344B
MD554e1bed9789eb1fd087d550981aa454a
SHA11de1eefda956cf977aaa7515dde46947f1fd6783
SHA256dffa36081c787037e4582747a61efc45e2c68b504fe85e4798815a68881ac33f
SHA5121c6101649937960a03ce6c66fb46fbbe14cedc72fe957bd6981b73e49c2dd0ec185a6806fb5466a013218da8e099b3c82462062c101fa59c285bf4c559938911
-
Filesize
344B
MD55025a34e09a32c0ac98d4860fc797e4b
SHA1ee4eded782b8d49752997d6bd35fb85d6168b623
SHA256971827c15eb1836abd966dd9448dd66d14eff9d5a8ee088226da826004f3f47b
SHA51259f287a1fba10a5af847ecf822f49c845f954e1f6e6710e6f77b98460ca472483f81c424a3fcc36c161e0717f4b0fbaae30da7da0206fb3f7ac301069ae51242
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
208KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
40KB
-
Filesize
40KB