Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04-03-2024 21:36
General
-
Target
b329aa1bb05795256da90c44cf323f7c.exe
-
Size
188KB
-
MD5
b329aa1bb05795256da90c44cf323f7c
-
SHA1
a842b47507b8b54f60e2ab33891d20eabd788228
-
SHA256
35c1343b193b016edcd1d81824358ee37ccf82e00ae6cf05732ee5b3c001d157
-
SHA512
402116ef03556c0335927e76ea2ec0156a150a0cfb2e439236e63dc64e9c82ab20162977187688a242938b25026916189c50341bbcf4c23935b332fe0645befc
-
SSDEEP
3072:v+WL5B1MmWgWUP6jM7KJa/nObeYtXW7l1v2S5:DLlMmMra/nObeymJQ
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b329aa1bb05795256da90c44cf323f7c.exe"C:\Users\Admin\AppData\Local\Temp\b329aa1bb05795256da90c44cf323f7c.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\b329aa1bb05795256da90c44cf323f7c.exe"C:\Users\Admin\AppData\Local\Temp\b329aa1bb05795256da90c44cf323f7c.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
-
Filesize
316KB
-
Filesize
316KB
-
Filesize
4KB
-
Filesize
316KB
-
Filesize
316KB
-
Filesize
316KB