Analysis
-
max time kernel
146s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
10-01-2024 07:17
General
-
Target
4fecc9e93adda068a35ae69b127d5ea2.exe
-
Size
211KB
-
MD5
4fecc9e93adda068a35ae69b127d5ea2
-
SHA1
cfeb8f8a31566d8eb4fe7aa6087cf66ba4f663c8
-
SHA256
a9f1c80bae5107f0cae797b03a7dc52df7b7bb852f0ab3ffd9281c8b7b23e2a4
-
SHA512
e9af103c777c5eddf9c9576d3ca64a5f012941e59c820dac68e449945c48e1450e7faa5d040f9fddffe03d13e3fa8241694d1f48dc6c4280a585d398b9b4bd34
-
SSDEEP
6144:HoL9izSBzlQeNSNXTxv17Mcb+DlAOgwaj8B8L8HVNblJlPHsaz5i7nSngy9vImwQ:kzgNF97McSDlsgg81VlJlPZi7nSngy99
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fecc9e93adda068a35ae69b127d5ea2.exe"C:\Users\Admin\AppData\Local\Temp\4fecc9e93adda068a35ae69b127d5ea2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB
-
Filesize
216KB