Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
09-01-2024 03:43
General
-
Target
4d3fbbb4b6fd6a192aa27b6d51361c45.exe
-
Size
255KB
-
MD5
4d3fbbb4b6fd6a192aa27b6d51361c45
-
SHA1
ff7932d0e5f9cc95d0e6acde04bfc6d9222299cb
-
SHA256
7bec8993651816a0d594ddfe3f6d875106e18f180d17e759b803ad4a1e4a2902
-
SHA512
9ffd119fd0cc135858bdfed7f3016f7d8a4bd49ce141f6a56f47e00d27fd4403bb3336e9776e20b7cf76f6e97c2b5331577b4af3d2ef5cd3cbf4465a620de18f
-
SSDEEP
3072:DiG47vmfhnT1unjf9tLEciSWEqF1R/plSaRCKj8Hn7z89NbgjZrTtM8M8Z1yuxZq:Di0J4H+rRZRxjc74DbgjNTiwr+
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Modifies system certificate store 2 TTPs 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4d3fbbb4b6fd6a192aa27b6d51361c45.exe"C:\Users\Admin\AppData\Local\Temp\4d3fbbb4b6fd6a192aa27b6d51361c45.exe"1⤵
- Modifies WinLogon for persistence
- Modifies WinLogon
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344B
MD5da913e022706e95be61fa3e98d18e2e5
SHA18401810574eefc094b7e6249222e415056ac165d
SHA25648f793397e53423db492e8ffcc5c5d95bd4073e63d6d27499604b58e011fe531
SHA5122f185cae8124e73c18e58b5642220ab0b0c3a1fd64dba9c993b9f5ca94f2cf6a9a5f351cf4bb62d3d0a9a6a7cefdb0e266ff97ef946036dc5878854572395736
-
Filesize
344B
MD538c1f341004b73fa9c83cae278cf22a3
SHA1202993047b3d50c8e12aa024980eeee80130ca70
SHA256d7673bc4cb42ccf8d259c2faba991d77109072f1874507b98828a2a5701ddce8
SHA5121c93a377f33e347a2101f463bd8ede15c3c0bc6bea570303e4c83fb40e831d630152e300dc48cd773e0aee26e43bd39e12eb7210babf99d25e5c469419bdea79
-
Filesize
344B
MD5c6c2d810425d14031528e0a3b54a999e
SHA1fa1355cfff3b6cd0d3b42d725de622cc7e3dac1c
SHA256aa0d8db7fef88722c92bf4c3e4c22c49f96cc4a872d64a81e5fd1aca6708b1f2
SHA51292f9d02fd70fd36561564ef9cd35fe2121f03c2c642dddd8f025f173e42bbc7352ba78b61a3f49468fdcc370d5b823e81b639139dbe721756178790ac4edf74a
-
Filesize
344B
MD501d88369629d61c50b4b299bc8694596
SHA12bd4b907d5bd02a35c539944d82f3f57374a6ea5
SHA256aedd40e421037bb482be77c084a7191bd682cf39acbf902eb0a61ae648e3f5b1
SHA512a18560ae3fd049231b0fd08c5ee1ab320520f499913375935c318342a954ab64bf6ca43ca2c54593c0b8d34d80b00ce3cb7f4ba68e3455d84199ced7c4fb5be5
-
Filesize
2KB
MD5fa48aeb22198afe1cca4c67d731d5bf3
SHA1672d41c47d832707d552d8ae732b9a569a6d23b8
SHA2566005485ec5979b724f44f0d1da26cb81ea1e52c9643bc497ab5aa049412c4817
SHA5128ddbcff1b5d38d68cfbce34c21790243834d55a1f4974644ed30e866a4717a8d5b9abd1493522069710d02f4d2101e8ea0c47568ef90e6cb307e34477857a73f
-
Filesize
1KB
MD5e0332046faeb3e4b31d5bb234dae7508
SHA1bfa287c7eca2fd666cff21bf390ceadde0711129
SHA25623acad6e111075630c9ab84f36fee2ff8f74a4468dc8441e5a67842ce009497b
SHA51210d384688634c42d9b5bffa97aee3f83d089015ceaff1787e09a60d78fa35a67a3ff1c44d2dc7548f3a4c4b7d8b92e930087e93a6e6fbb9b11c3c9abbaefcfef
-
Filesize
4KB
MD50cca1aa22f8845045d1c70ca469f5dcd
SHA12ee5a684ea89fbf2aa7c5ed30e46e6e12bc7cae2
SHA25656952f8bce51acfe4a7323a26864f20a4cda54281f4accc17938ea7d121c2bc1
SHA512a9b02fa5bf54424fc6ba1d91d056d88e75623cdd351a8eca521c82bcf1c3a648554757395342828f20458348595ea9fe24e10eda890470cd1029ae6a4527007d
-
Filesize
1KB
MD5fa7bc99ca1b78d10374c21a64a943152
SHA139b517c7ddabb736d5d4a50f15224ceef2ebf424
SHA256b5fbdc96401fb0af0e9ae6a4fbb76d375aa40581f558d691819abafa24ebeace
SHA51254101d00ea3b71b17970498dc02c3299815f5167c07d9888bde30442771975177c02ddb2618662727b49269759e12fcc997efedcf359103274367fdeb3335486
-
Filesize
1KB
MD5185f6e8576119957b0629d53ecff3608
SHA14a4eab08f0caa27ff71f4247f0ae16703dd892a5
SHA2564c4e73777415b53c862b54ab3ca918aa285a1eb1b14126c1d09d5c0ce7d7929f
SHA51273804ab86a3acf777d0b909fefcb981b5db1747625f8738f77810290e20f0c02fef357ea9d49991d685aaa99d9c9447f4c711d095c35e86a63defcf8a0d1d1cd
-
Filesize
593B
MD5926512864979bc27cf187f1de3f57aff
SHA1acdeb9d6187932613c7fa08eaf28f0cd8116f4b5
SHA256b3e893a653ec06c05ee90f2f6e98cc052a92f6616d7cca8c416420e178dcc73f
SHA512f6f9fd3ca9305bec879cfcd38e64111a18e65e30d25c49e9f2cd546cbab9b2dcd03eca81952f6b77c0eaab20192ef7bef0d8d434f6f371811929e75f8620633b
-
Filesize
2KB
MD52d9147fe2074ed034235954bb4a14e70
SHA1c8e8ef03dd0a9d3a2e337d5d87719f3b0b29850d
SHA2564c72dc98efd939b462f9517f41a75b0192c2f98caf2442d09d7693eb7070aa34
SHA512ab844864781ac7d0c4993ee6fddc4ebe42f92fcb08f8a1c01deb1a7a2559e1aee7b906484c7f74c7d5fc170388a54bd94e28fed0c6c6bc5d504c9909f896e60c
-
Filesize
23KB
MD5d3df4240ec2d9d121d8949febf8718f7
SHA1221bcd4c7c307b431064c6d21f7f2fd1a49dbf46
SHA256464dbef0c16b334613c525a3ab5aa42349191739db872678578da5ad248e2724
SHA512a0e9dbbf584dd98e51ec3d830afb9f6647029d814eb9842a9ccaef1b494e8a28bfc4079fa98831281384421eb39f7f8503c9435b0af33128f4eaba858560fdb1
-
Filesize
1KB
MD5eef14e8c08c90bd54ac368c4efb574a6
SHA1647400eed731ae2fab730a070822b1d0c6b4b155
SHA256303f3ade202520a6043e6a5ae810384d26fbbe2517efd9fea1c955631b705e87
SHA5120407ed4cb34e0e1a366df30961cf2d673c84d14c4c2deaff62fcbd929fbdcdf7f3647086f7d825d69ca195198862af3fffb84a1c0a168cd107b13bc14bd77b75
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
720KB
-
Filesize
1.7MB
-
Filesize
352KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
780KB
-
Filesize
352KB
-
Filesize
1.7MB
-
Filesize
780KB
-
Filesize
1.7MB