Analysis
-
max time kernel
150s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09-04-2024 19:54
General
-
Target
7ebafcbe769f7d1c80fed51d42f16e5f.exe
-
Size
357KB
-
MD5
7ebafcbe769f7d1c80fed51d42f16e5f
-
SHA1
ff83ba0d02351c1bcfa1f88e361560db9d4609ee
-
SHA256
35f8f54e3417795e8d1d7262b0542792ba692a2f44a71ae10e71fc5173bd6d49
-
SHA512
367727f471ad5780d1116bbfe8d56d012b5244f2f797d60865902fb67ad97504615b1144e1039ae2495dd70159052f239dc9f68c8ba3707a75d430ad73d36a44
-
SSDEEP
6144:Vu+kBmWicfSPyXTnkl+r+MHLt8TaggWQI9T1S0osk:VAmWip2TnGC+MHL2mgiIF1S0
Score
6/10
Malware Config
Signatures
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ebafcbe769f7d1c80fed51d42f16e5f.exe"C:\Users\Admin\AppData\Local\Temp\7ebafcbe769f7d1c80fed51d42f16e5f.exe"1⤵
- Modifies WinLogon
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
680KB
-
Filesize
740KB
-
Filesize
740KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
740KB
-
Filesize
4KB