Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17-03-2024 08:35
General
-
Target
d06b6e0358b55b0bb54c3eade41b7d37.exe
-
Size
1.0MB
-
MD5
d06b6e0358b55b0bb54c3eade41b7d37
-
SHA1
acfe2ef8dcb349cebe2e94fa6cded01a9f8d9779
-
SHA256
4e628ceb70e506731aa26a97e3c8073887c8c6fd21929d88edf84c82ef9eebce
-
SHA512
4ee9646acb973cb1d4d2b67cf8a191f19a57e3852d8ae9214d563cf2cc91a06ec2c0a82354bf0009498da17cd8b2052ff97db2f8bdd95e5094995b5f962d0a18
-
SSDEEP
24576:NfQYosxhhUF54clNf7+6uHAW92zt/sWu2BSMCqDoRt+G:zo54clgLH+tkWJ0Nb
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d06b6e0358b55b0bb54c3eade41b7d37.exe"C:\Users\Admin\AppData\Local\Temp\d06b6e0358b55b0bb54c3eade41b7d37.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
472KB
-
Filesize
9.9MB