Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
19/02/2024, 23:48
General
-
Target
3e42ca6e6813ad915960636e280876071a25e40eb5afad1a7b66678fc470674c.exe
-
Size
1.5MB
-
MD5
52bb0e38ff249f73a6982eea51a61c05
-
SHA1
fc7b265e2b1407d87726998a1f7cefbf830d67f1
-
SHA256
3e42ca6e6813ad915960636e280876071a25e40eb5afad1a7b66678fc470674c
-
SHA512
0aa62cee221f99bb6ca59804f269af05ad2492b6d3a420b85307df027bc6dca2d02939f12249d0a521d118918e5b5b68360a1db26a2a348f80c4360f2d9c9028
-
SSDEEP
24576:a7zNkhm5PBn4qcHjKFZiZhz+dmrVMN/5oh:CNEm5ZnTcHjKFSyb/5o
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e42ca6e6813ad915960636e280876071a25e40eb5afad1a7b66678fc470674c.exe"C:\Users\Admin\AppData\Local\Temp\3e42ca6e6813ad915960636e280876071a25e40eb5afad1a7b66678fc470674c.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD516529b699364d4bcbe98f5dd522b3153
SHA17e5e91b644b34555a61ced21e40a79d090f75487
SHA25617e4bac3a9c2fb8a7bfc3747eda7b26fa62f263803f0c5a00c36efff55f3e597
SHA512a99e8a4cd2c5290e350352ba7b7184feb01c304fc58388d3669bf5f3fe5d7826da2eccdac60610532bd2aa4832ede9e714127d5f992fbe3d14633f0e7f1125d6
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.5MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.5MB