Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
01-02-2024 05:14
General
-
Target
xf-pter23.exe
-
Size
47KB
-
MD5
e04b8c6912b73358b7286919e103b01e
-
SHA1
e65358b6330e86dc454c43ae829df66cd710ede4
-
SHA256
01c5e7447b0b639defcbf52b97f376a3914866220aeacb9147cc7b98f39b18bc
-
SHA512
f3a7a4952991ee160c24cfb40d5cbfeee8bed17a3db40f464e235f66225e6414296ad44fe53713232fe440107a0915de95e115309698c90f36adf9d8d77bde13
-
SSDEEP
768:8OkQXFNPg0cU4vwAYXO2CG2aOw0Q/Z4xAR34TGSehVDfwhItRyznbcuyD7UyYUEj:8SN4ZfNYXORsOy/Z4o/SeVDfYcRyzno1
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xf-pter23.exe"C:\Users\Admin\AppData\Local\Temp\xf-pter23.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x490 0x4a01⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB
-
Filesize
208KB