Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
25-02-2024 04:25
General
-
Target
19046ffd0a7a3365ba8e5b464bba149b.exe
-
Size
101KB
-
MD5
19046ffd0a7a3365ba8e5b464bba149b
-
SHA1
66ce137113ada0844a916252f0e456d06cf906c1
-
SHA256
9ae11d65b395971a284fc936690c5d1dfd035332321fba900dfa873c58243283
-
SHA512
639f852a4665bb80271f10e1c60e5fd6046c556aaaa5c6e9e5cbfb43552ce2d7d4d4df03c15d51ecd28f25845e71a1ee60dc49a6fd76a6b468abfb6e153a2fed
-
SSDEEP
3072:z2NFei6thiKp+Ag3Q5JMUXFKJUHL5typ2g4e2byJYN:uFjOg3Q511Km5omeS
Score
9/10
Malware Config
Signatures
-
Contacts a large (5254) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\19046ffd0a7a3365ba8e5b464bba149b.exe"C:\Users\Admin\AppData\Local\Temp\19046ffd0a7a3365ba8e5b464bba149b.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB