Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
24-04-2024 12:15
General
-
Target
b14de8797e8343e8df8b09a71f0df4f7f510fba7aed6648118268ee9ba34dc60.exe
-
Size
1.3MB
-
MD5
ea8c3fec317804137aa5c6aa912b78e4
-
SHA1
bd994724171c1175f3556e373c9b1416232a2d29
-
SHA256
b14de8797e8343e8df8b09a71f0df4f7f510fba7aed6648118268ee9ba34dc60
-
SHA512
b495eabd43771056979b0e7af7a5b77701c6b3908a061b96dc982dd50eb26b7d39a88dc156648ff8ce8494e5088c355434ec8746e3ea18c08a72aef2dbfc2013
-
SSDEEP
24576:uo9BpRmlh8t0D+7y8G2G9yL0cMoThTR9PyuLzpQo:uIpm+brLC2hTR9quLB
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b14de8797e8343e8df8b09a71f0df4f7f510fba7aed6648118268ee9ba34dc60.exe"C:\Users\Admin\AppData\Local\Temp\b14de8797e8343e8df8b09a71f0df4f7f510fba7aed6648118268ee9ba34dc60.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD5caacaec0e89a9be9d4c4955c511d4cf3
SHA17834128f8276f44d7b805553c810da1a966d8c2b
SHA25666016a4f32abe20016e760062597b9b10bcd84fe745061bfeb9fe7b3b8388bf5
SHA51246be4c2eb3fa91325e35d7af59b138682f8465412bb1cf41c86e0a1a36bcde9df2995ddda85b77496242d2c2e0e9040b9bf0585440a9badab9b2e09d94697b2c
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB