Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-03-2024 15:13
General
-
Target
a9053a3a52113698143a2b9801509c68d0d8b4b8208da453f0974547df0931bc.exe
-
Size
703KB
-
MD5
43478841baa4b8754f75516220e33ac3
-
SHA1
2585a613129d7e3dbff3eb16b10ce3fe940c99a3
-
SHA256
a9053a3a52113698143a2b9801509c68d0d8b4b8208da453f0974547df0931bc
-
SHA512
9441209433e2d3d49012431011048cd33a7ce980482658a0b1e2ccd3baa70524d2585901b6130d4644d7ca0139d881a9f11a933949ed39ad805a147694b37f87
-
SSDEEP
12288:C6JZ+UD5+1fpL2ikTgmPb2EdVu/BdmSHqDd6bhW2RJV7uikFg:JEUD52fpL2bgmSEds/BnKQPlubg
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a9053a3a52113698143a2b9801509c68d0d8b4b8208da453f0974547df0931bc.exe"C:\Users\Admin\AppData\Local\Temp\a9053a3a52113698143a2b9801509c68d0d8b4b8208da453f0974547df0931bc.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.6MB
-
Filesize
328KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
16.0MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
16.0MB