Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows10-1703_x64 -
resource
win10-20240221-en -
resource tags
-
submitted
26/03/2024, 14:32
General
-
Target
$TEMP/keygen.exe
-
Size
543KB
-
MD5
e9bd39cb9de44e7847e1c95b4d3f48d0
-
SHA1
2c9dfade365611920d4a6c724f25071a153f91fb
-
SHA256
83ea7a6ad595664a545e4e8c763469feec7ac4ebd82e33a8128e2be3ec8fab84
-
SHA512
b50f7794f7109bf7ae36c60b1ebdf402ba5098d9039f48f6b79201c7a7884d0229dad7ca6b66b4873d1ce69e00cb580383a3e21ed2ca59bbda4ee704c33e9d06
-
SSDEEP
12288:tpGVQ4KQonRBVrzRNsRKa7h6prqpbZzyN2:tp1QonRBVrzo/zyU
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3a81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB