Analysis
-
max time kernel
1575s -
max time network
1515s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
30-03-2024 18:05
General
-
Target
OpenRec.exe
-
Size
261KB
-
MD5
7784f159f6bbc4bcd052ddfaa4332035
-
SHA1
bcc9f9b0e16d01182df38c41b355230a4f2ddac8
-
SHA256
4b8c8c159dc61a3e70ddbde9a5a88436ecd80f7b4df10698b39b87a7a0860b7b
-
SHA512
a9917f67ecdf1ebcf0503d69d5096b6dcf6b8b7c78aea089c602c15f13ffcd064f1479c1aa4d2a1c162720be8f97712fca15bda038d9c4401326b965e655cfa0
-
SSDEEP
3072:M6eSqsywT/IiODn5Ikt8pKO9WpheWyutIRzsc5quFyYkm:MLDn5I7p8hen5Y
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\OpenRec.exe"C:\Users\Admin\AppData\Local\Temp\OpenRec.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB