Analysis
-
max time kernel
150s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26/03/2024, 08:24
General
-
Target
deb679ce05525877ad2238fde7f68300.exe
-
Size
225KB
-
MD5
deb679ce05525877ad2238fde7f68300
-
SHA1
bbc10e1cefa401a64b1763e7b1aa0739345a31ec
-
SHA256
f4536b97c0bd042ab6355a6e4bc737e082bdadccf845f4a17d90d8a8dd5ddd6d
-
SHA512
ca794a5b9e61b6bcad0a02203eb7218e96e52bd37d8dd9fbfff7bc27aeaf2d2947c3ea2575983bf7ca9a21104bef250a582c7cc5ab82dbb99ec7affa4e451c75
-
SSDEEP
6144:JsvlanXCnHs7wClbYxg99atKAUHaA3mH8H3lxwTlI+d:Jm8nXEHiVX99M72mH8H1xmI+
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\deb679ce05525877ad2238fde7f68300.exe"C:\Users\Admin\AppData\Local\Temp\deb679ce05525877ad2238fde7f68300.exe"1⤵
- Checks BIOS information in registry
- Modifies WinLogon
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
464KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
4KB
-
Filesize
736KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
464KB