Analysis
-
max time kernel
125s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25-02-2024 01:14
General
-
Target
73a1d01628094beaaf13d744adef03bd2848eda2be4c9a6a1ee2bfef590a2ebf.exe
-
Size
28.7MB
-
MD5
1b9494796a3f98d08dd6ff603a0939f4
-
SHA1
99b8991e2b02efd7fccccc323baf3dbeeb51dc1b
-
SHA256
73a1d01628094beaaf13d744adef03bd2848eda2be4c9a6a1ee2bfef590a2ebf
-
SHA512
cce71be93259ef71b168eeba234f856f88620a268d1175e44397f2b6a0cd82eebf9d628cc99f6a59e2acd7be018aa845e49f118c8dbc973a265387f324de5cac
-
SSDEEP
786432:aosOT9d3Qvd7JNxXCaflAOvYvPQqrncz1:aYT9hoddXCafaOmO
Score
10/10
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 9 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\73a1d01628094beaaf13d744adef03bd2848eda2be4c9a6a1ee2bfef590a2ebf.exe"C:\Users\Admin\AppData\Local\Temp\73a1d01628094beaaf13d744adef03bd2848eda2be4c9a6a1ee2bfef590a2ebf.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
28.7MB
-
Filesize
256KB
-
Filesize
904KB
-
Filesize
1.4MB
-
Filesize
816KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
208KB
-
Filesize
712KB
-
Filesize
32KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB