Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-03-2024 15:13
General
-
Target
21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01.exe
-
Size
708KB
-
MD5
987a06a5c02be92cdeae2a99a408a716
-
SHA1
31e4c64f1fcff7824b023e86482e75870389edef
-
SHA256
21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01
-
SHA512
90db12153f5abd1f8d20a89a473c46f0577ffc2c3a681f4f2bd68f53b8cd2d45c372bce6e0d11d2832ae223eebcb2b9a8a1dc806b5cd8a510134cad830c2596e
-
SSDEEP
12288:VROJm7hOOdN2++KEjDz/lnp2WBILtj+fITU4Td9T31r6U2dEV7uikFg:VROJ8hjkLKgP/n2WaLtj+fINR979N/l/
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01.exe"C:\Users\Admin\AppData\Local\Temp\21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2020-0-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2020-1-0x0000000000BA0000-0x0000000000C20000-memory.dmpFilesize
512KB
-
memory/2020-2-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2020-3-0x000000001B4E0000-0x000000001B532000-memory.dmpFilesize
328KB
-
memory/2020-4-0x0000000000BA0000-0x0000000000C20000-memory.dmpFilesize
512KB
-
memory/2020-9-0x0000000000BA0000-0x0000000000C20000-memory.dmpFilesize
512KB
-
memory/2020-11-0x00000000026A0000-0x00000000036A0000-memory.dmpFilesize
16.0MB
-
memory/2020-12-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2020-13-0x0000000000BA0000-0x0000000000C20000-memory.dmpFilesize
512KB
-
memory/2020-14-0x00000000026A0000-0x00000000036A0000-memory.dmpFilesize
16.0MB