Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
16/03/2024, 08:58
General
-
Target
6ff3556284e421878f59115bd1d345a2ac17ba6c7e8972caf8947a003353ace1.exe
-
Size
706KB
-
MD5
aa69fa556ad198538d010630d70ee234
-
SHA1
c9fb9d899ea3df611e3831ff0d493e3000d7c013
-
SHA256
6ff3556284e421878f59115bd1d345a2ac17ba6c7e8972caf8947a003353ace1
-
SHA512
497db4e81f5e00097b859d0d938cfe1a9321b6b008848feb06eaccc2e35f3f17fe5a1743638af31029e751e4513df2bfffd52fac1b9d28b77c08bc288b6ab95a
-
SSDEEP
12288:fWiB+tcOe7qA2p2huV8ngoPy22OaXbQY/JaYfjYvT:fWiBX3r2p2gV8ng2P2OaXbQYxj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ff3556284e421878f59115bd1d345a2ac17ba6c7e8972caf8947a003353ace1.exe"C:\Users\Admin\AppData\Local\Temp\6ff3556284e421878f59115bd1d345a2ac17ba6c7e8972caf8947a003353ace1.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD5027f1646269d7e3f6bd94e2678c6fefa
SHA1137b053fb23f1c7d7054f14652495131b5a02875
SHA2561f47c3141c84e8ed66d8f125b729a6b61e4daf71e326097900d8fff4babe8f67
SHA512fd1369946310710c6de587d348ae9800fa5b870d97d6dcefc3cc077d82d468e56fedeed393d2f0e059af9e55111461af60dd1e62aa0ee54e348b5a2cb0ce359c
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
724KB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
724KB