Analysis
-
max time kernel
151s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/01/2024, 11:36
General
-
Target
7499919c85a927b5a7c58b1d275b378f.exe
-
Size
240KB
-
MD5
7499919c85a927b5a7c58b1d275b378f
-
SHA1
22094bbbaed26592d026b9a81247e6521cf9c97a
-
SHA256
3cac4aa35fe05a228e6419f6610e30d622bae05245c2c8fae2217462f0ed4a25
-
SHA512
53391977d69a47c10c7f520c67d0f1082a909058febacf90e751f9c50fc53c2d72f6463567f3f6c0a36d355ca4f64338c4fcc9d62776cd705d6dd100164618f9
-
SSDEEP
6144:75GZEJ/HJApjF2ZTLTZbMf51ra8Xh8oOpVA0Bvp2k:FiEJRIF2Z/tMfC8RfOQ0Bs
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7499919c85a927b5a7c58b1d275b378f.exe"C:\Users\Admin\AppData\Local\Temp\7499919c85a927b5a7c58b1d275b378f.exe"1⤵
- Modifies WinLogon
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
532KB
-
Filesize
4KB
-
Filesize
532KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
740KB
-
Filesize
740KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
740KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
740KB
-
Filesize
532KB