Analysis
-
max time kernel
21s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
06/03/2024, 19:53
General
-
Target
$TEMP/keygen.exe
-
Size
442KB
-
MD5
f6b07dc43d3c4f489e95e05b6857425c
-
SHA1
8eee74c99659b4095646705a6f34913658518739
-
SHA256
780a30ea7a71707e5d49253f2687fc19e5ec31cca9311df48f16b7aa61a97433
-
SHA512
0bd9feb7827728ee0b72355641d4d569ac982478ec8fe58bc7e3aa0ccf219605fd4a68408ba7d0d0d5fb681f6aea1e978eb4e96359498dbeeed14f7e1c873b37
-
SSDEEP
6144:pcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOsEOBeCibL5qcOgGg:pc/kEPDonR6Y436vRLkIxOgl
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004EC 0x00000000000004E81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
260KB
-
Filesize
76KB
-
Filesize
124KB
-
Filesize
76KB
-
Filesize
76KB