Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-03-2024 15:13
General
-
Target
KeepCalm.exe
-
Size
218KB
-
MD5
f994759181fb964af17fab2f7994b9ca
-
SHA1
9ae72a3dc37955af7526fd8566698b7a97ed7cb0
-
SHA256
043969e70014662e6a8b90eaaec10f4b4064dc42c0aeba39639af82f11cbab7e
-
SHA512
c36ff4026879e6cbab1e95e8a8a9cc6dc8538de9fa5719625ddf5a9d578dda310325cbf1e44a2dddbc85f27521e7e736637bb102e1d230f861ecb8f2e0219188
-
SSDEEP
3072:Y9mM+lmsolAIrRuw+mqv9j1MWLQFidJM+lmsolAIrRuw+mqv9j1MWLQd:EF+lDAAJdi+lDAA
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KeepCalm.exe"C:\Users\Admin\AppData\Local\Temp\KeepCalm.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2848-0-0x0000000000D60000-0x0000000000D9E000-memory.dmpFilesize
248KB
-
memory/2848-1-0x000007FEF5490000-0x000007FEF5E7C000-memory.dmpFilesize
9.9MB
-
memory/2848-2-0x000000001B370000-0x000000001B3F0000-memory.dmpFilesize
512KB
-
memory/2848-3-0x000000001B370000-0x000000001B3F0000-memory.dmpFilesize
512KB
-
memory/2848-4-0x000007FEF5490000-0x000007FEF5E7C000-memory.dmpFilesize
9.9MB
-
memory/2848-5-0x000000001B370000-0x000000001B3F0000-memory.dmpFilesize
512KB