Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
10/04/2024, 18:41
General
-
Target
0d653767ae1b1d156da5270f2312842294450153a240d0605a3fe4af0fc11a7b.exe
-
Size
1.5MB
-
MD5
1e2f0b3daaa8f6ebc9ab95b60298d2f3
-
SHA1
e46f768e0be8b75d0d73473ca447ecdd3442612e
-
SHA256
0d653767ae1b1d156da5270f2312842294450153a240d0605a3fe4af0fc11a7b
-
SHA512
978400d52e8c0d9b98b27f6c31a254aa8b5de96de9c8e00a42f1bb4cf7c86ea6934a589eca5f6d99be403cf37fe9296883927d30ff9cdeb92def9bd960818e18
-
SSDEEP
12288:lLWDK3aAXOILyiYkqMk7+KzubUtYJPfaNiBGwLFzKGMaoQWHMI+XG9:lLWeThXbqT+KzWEKS0nFz1MaoCG9
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d653767ae1b1d156da5270f2312842294450153a240d0605a3fe4af0fc11a7b.exe"C:\Users\Admin\AppData\Local\Temp\0d653767ae1b1d156da5270f2312842294450153a240d0605a3fe4af0fc11a7b.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB