Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
18-04-2024 18:19
General
-
Target
2b3ed63e74773c5c040eba08bffcef0d43174d07749d023cdac13d82877f31a9.exe
-
Size
1.4MB
-
MD5
05030f99b7b8a97a8fe6216fc72f2312
-
SHA1
10b772a3e28b3750a82954d212c27cad7f5976e7
-
SHA256
2b3ed63e74773c5c040eba08bffcef0d43174d07749d023cdac13d82877f31a9
-
SHA512
01d09e06cae02e732dbdaae98db4d2b195d0ada48d0893aff2a62e87ad472446f62d54ac4bb0cdb6451c578580755b8bb7bf5d6a61004894d51575b1bf98e2d0
-
SSDEEP
24576:6srs14u4hZA3kAchviyUXp1AWl3WzrhMTtYkUcIUYtu0My:7rs14u4zSMhvLEAW4FMTKk3Wtu
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b3ed63e74773c5c040eba08bffcef0d43174d07749d023cdac13d82877f31a9.exe"C:\Users\Admin\AppData\Local\Temp\2b3ed63e74773c5c040eba08bffcef0d43174d07749d023cdac13d82877f31a9.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
644KB
MD5c24b71b04c877e3e9245f2afbe80bd0f
SHA1a28ab0afb7f9087910202e9e6bbdf82f1852fcd1
SHA2568b1077b1ec179d74e1b6faeb620305522c2c5ecf0ac60b9b3201cb7dea8d531a
SHA512beec5a1507c8c7ec9b653065c256a327c77220b5d3415b564084c611a9c8b4740075702736fc3adc1134399d89f42b0a2a4a9ac140a31489b6d6e5c0c7b7e51d
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
656KB
-
Filesize
656KB