Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
29-04-2024 21:24
General
-
Target
$TEMP/keygen.exe
-
Size
212KB
-
MD5
16b3ed73391d8024488f7dad5447c414
-
SHA1
4a5d3087aea29962eb9d7877dc897d28b1a9329f
-
SHA256
6bd227f2cfd2c950db89dd92facb7a496fd8de1844bb5184d161fdf3c73262f1
-
SHA512
a046b1e8982e02655a9828c382f1e80dd0ed9b6f0e663bbe6161374b19aac291fa9d782dc9cb785346b9024daf91bab47b390733b122a7c1f2c35fca6171f2e2
-
SSDEEP
6144:tPA4GcGvY6Q4rOQonRBVSszRNAO5Xd0WHUN8u:tpGVQ4KQonRBVrzRNXRU9
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x384 0x38c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB