Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
14-03-2024 12:05
General
-
Target
e16f2489b58c57b7a6d6090d0ff76ab234d7487e08ba4d2c5e8cdf5bf3d396e3.exe
-
Size
1.6MB
-
MD5
bb9eb2a4a693dee999f0c4915dc464a4
-
SHA1
2090187b69d383347352bf924e97bd76301cc235
-
SHA256
e16f2489b58c57b7a6d6090d0ff76ab234d7487e08ba4d2c5e8cdf5bf3d396e3
-
SHA512
038158d39b32a5120ce13831325ba667b9615d94662ab07b4c376cd43b28cb1d04280fd68fd19e6a9be7a53a8568842e0ca49a1fedee5eb249b851c66f787c7c
-
SSDEEP
24576:jLCKABm/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:juKkmLNiXicJFFRGNzj3
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e16f2489b58c57b7a6d6090d0ff76ab234d7487e08ba4d2c5e8cdf5bf3d396e3.exe"C:\Users\Admin\AppData\Local\Temp\e16f2489b58c57b7a6d6090d0ff76ab234d7487e08ba4d2c5e8cdf5bf3d396e3.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
2.6MB