Analysis
-
max time kernel
152s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
18-04-2024 06:18
General
-
Target
68a0312aaba996f1c3a7bad2c7efd2b4c158fd1465e6161186712b40828bff75.exe
-
Size
1.4MB
-
MD5
cf5d98d0c046436cc4e4086a45c12781
-
SHA1
6812e376a3ef3acf043a8de5d55b38773f888482
-
SHA256
68a0312aaba996f1c3a7bad2c7efd2b4c158fd1465e6161186712b40828bff75
-
SHA512
1ad581f0422d6548474ab05e5afc5a287bdad82bc506452eb091a80b2f01fb811ecb90b44b7a6eb086e0a19f392c08688630c6a46e5b01c2be66680243b391ce
-
SSDEEP
12288:30P/aK2vB+Zjf7kHQWNThwCmTLTPCvXPz5Zf5hz0LAtmCBc8dwIxPAW+:3kCKAB2jzWDwCmTPPk/z5Zf5hz0dNUX
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\68a0312aaba996f1c3a7bad2c7efd2b4c158fd1465e6161186712b40828bff75.exe"C:\Users\Admin\AppData\Local\Temp\68a0312aaba996f1c3a7bad2c7efd2b4c158fd1465e6161186712b40828bff75.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD532b97ec5c5590f894c557686b99373db
SHA1965859823862ba2389984fd782663b812104b228
SHA2561fde29a1d01a55633766940fdb977a0f01af635815430ab594e54600afc100dc
SHA51279abfc3d82db87c3a94c9eaaf9afc137ee31ae1c74cecfa71293151cb8e09b66613293e1cbfd31148056caa2609bbbbcfdba94e1fc40450f70b0c80ada722816
-
Filesize
2.1MB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
2.1MB
-
Filesize
2.0MB
-
Filesize
2.0MB