Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
01/02/2024, 04:32
General
-
Target
d19db4d4505148229741fbeb71a791647f03777836c7affe236ad76774804ea5.exe
-
Size
1.3MB
-
MD5
38ae5252b49922035fe3a2e42c3cfa2f
-
SHA1
212e9c03eba0b4fd4bdcba56e92b2d86a3168f15
-
SHA256
d19db4d4505148229741fbeb71a791647f03777836c7affe236ad76774804ea5
-
SHA512
73c0bffad09ea24ec22d68487a0f0fea2d72d6cd25f3d8c67ff2392292c63984d1591475b047dd74b579d6976af5c18db47102646910703fcab2c9660d37ad3f
-
SSDEEP
12288:D0P/aK2vB+SqZiMwQJXx6a/YvRcFKBsX9Da2XbJda3Q93i8OPowY79pk/DCWN:DkCKAB2ZiUJXca/VQBIe2dhi8OP3YGv
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d19db4d4505148229741fbeb71a791647f03777836c7affe236ad76774804ea5.exe"C:\Users\Admin\AppData\Local\Temp\d19db4d4505148229741fbeb71a791647f03777836c7affe236ad76774804ea5.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD582cdb04bd3999353d05fbc228e8bec84
SHA12199fbfbd32b8324a1f9ab39a9f98553fa77b36a
SHA2560dd176a7f9af5d04f743994d13fa61b922a4e5d086d1a5d403375860aa789311
SHA5127d08b7138ec3af954583d43e871dcfbced5ee127b414a29b6730500ef90ca58da47abaecffc32bf6475859e774773e55bcc4b5f3cd9d1506791dee054d779911
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB