Analysis
-
max time kernel
132s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09/03/2024, 07:19
General
-
Target
a6e28fcbd6ef9bd4b12917aa954ff8d9c3a7c118a681a1d4ee59644832880966.exe
-
Size
1.1MB
-
MD5
1611634abf385dc8a2a42df2c6b3deca
-
SHA1
096043860541f841889153d4ffc8fdc05c02297c
-
SHA256
a6e28fcbd6ef9bd4b12917aa954ff8d9c3a7c118a681a1d4ee59644832880966
-
SHA512
337601b0969d8af42ce317649e4140e118fbc25f91b16bb4e69c56b784fb617f2bdb05d1b3d140675b2439099fa7a5f2d420e57982237213e82d5202a433cda3
-
SSDEEP
24576:bcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA:b5QZuTtS0rQMYOQ+q8CE
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a6e28fcbd6ef9bd4b12917aa954ff8d9c3a7c118a681a1d4ee59644832880966.exe"C:\Users\Admin\AppData\Local\Temp\a6e28fcbd6ef9bd4b12917aa954ff8d9c3a7c118a681a1d4ee59644832880966.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
738KB
MD5c89b75c6eef975d1c000178e53536033
SHA18b969c1801448f1def5853cef1a317dc690c1e6b
SHA25663e23a4c6fc647e50ce5e391609a87b88b04a6d643234df29a745a957baa7feb
SHA512b219d6687ba2e8ea9795be9f5cdc3bbc415082d27dd4499e813ffc87fc75783ce0d8df92053b0fb9716366b60b91109f6460cd7ceeaa58e5fb47cd7eae588002