Analysis
-
max time kernel
211s -
max time network
222s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
07-01-2024 01:06
General
-
Target
c81e2a3b15785a5fb548c5552be839fd92e2fc5423b372fba2f890ad488371b9.exe
-
Size
10.4MB
-
MD5
5a7ecc12107019e47294f27f4d40572c
-
SHA1
01891d681fd8b6baa0599e335999d427e55179db
-
SHA256
c81e2a3b15785a5fb548c5552be839fd92e2fc5423b372fba2f890ad488371b9
-
SHA512
77da7350f3cc4358e07250ee9c6cbd035a9a27a934c019967942841cbf3d49839cb765dc6a22bc121e34ef1494b33050dc5752beff5e1938b82848b3190d4ad1
-
SSDEEP
196608:DJ06wpSjt1RoahEDQH6TdBy5AY6TdVp/6TdvpPC:d0xpqloDQajPTpCppPC
Score
10/10
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c81e2a3b15785a5fb548c5552be839fd92e2fc5423b372fba2f890ad488371b9.exe"C:\Users\Admin\AppData\Local\Temp\c81e2a3b15785a5fb548c5552be839fd92e2fc5423b372fba2f890ad488371b9.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.5MB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB