Analysis
-
max time kernel
140s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29-01-2024 09:17
Static task
static1
Behavioral task
behavioral1
Sample
7f76aa85e20777f406a8d65a10ed4875.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f76aa85e20777f406a8d65a10ed4875.exe
Resource
win10v2004-20231215-en
General
-
Target
7f76aa85e20777f406a8d65a10ed4875.exe
-
Size
312KB
-
MD5
7f76aa85e20777f406a8d65a10ed4875
-
SHA1
b56ee2cd93cfd5c393f618b22c32de0942e66c16
-
SHA256
241014afd1932118e3253f5c74501aec6f573a379199a038ed1043296730713f
-
SHA512
8919bbcc158e45f9d54772ce903d100069e2a2870070574f0542c5c67a7d5640b6e154d9227fec41e9e2704510a2ac6caadd5ba52e3a9833b96d0523995422c9
-
SSDEEP
3072:qwbqks+CRoRHf/00jN/wfLERR8zsH1j0JsYUncjIdqIdpYGLcgcO9U004NOFVqDo:qweks+CRv0mfLQ8zW1Osdnp1t993cYgn
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 2944 7f76aa85e20777f406a8d65a10ed4875.exe 2944 7f76aa85e20777f406a8d65a10ed4875.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2944 7f76aa85e20777f406a8d65a10ed4875.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2944 7f76aa85e20777f406a8d65a10ed4875.exe 2944 7f76aa85e20777f406a8d65a10ed4875.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
242KB
MD52d624279cf930ac204f8d9c9c5370d53
SHA194ced8f710684026c4d6276b5233ea03d54a1d93
SHA2568f6306f6fdca3387a7a4f825122fee6a07b37b1eb3c15242d51c2930e31bb81d
SHA512f35801b1149d4b4ffdb21056b26b06ba116c3402b0e863c4acf0cfe57e20079a1aaaa1f064998d8fd27d6194382d7a1888c8df804441d68d8d231723f7500e57