Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12-02-2024 02:11
General
-
Target
95f81548abbad001756cc3f97f3877aa.exe
-
Size
254KB
-
MD5
95f81548abbad001756cc3f97f3877aa
-
SHA1
f368d6e47c81640a67d29221869c583950aef9f9
-
SHA256
00891bf787e2d21066735c46616d35ba33a7d3b2ae09851134af3364f800f2ac
-
SHA512
e8a14e42396caf472faa57591d70817987a3b1bbf62720dff53df7808f2b7ff428c556bf4b13bb680bc8a7f7a809139ea56d96aee3646e854c351b23b347ab42
-
SSDEEP
6144:OoRAgaL8J0IN95ccRQPXNBjv6D17F23nS:OoCgn0INT3y/NBbW6
Score
10/10
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies WinLogon 2 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 52 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95f81548abbad001756cc3f97f3877aa.exe"C:\Users\Admin\AppData\Local\Temp\95f81548abbad001756cc3f97f3877aa.exe"1⤵
- Modifies WinLogon for persistence
- Adds Run key to start application
- Modifies WinLogon
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
420KB
-
Filesize
2.3MB
-
Filesize
712KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
420KB
-
Filesize
2.3MB
-
Filesize
736KB