Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
15/05/2024, 09:16
General
-
Target
llcom.exe
-
Size
4.1MB
-
MD5
791040a50a025af2e9e51c127d411175
-
SHA1
3375f8aa72b5e18eb6476003e802e6e7dc8a09ed
-
SHA256
2034ef40d95b0650d0e9822dede4b1af9abc0010b8c96f30759945d3808b00f2
-
SHA512
8ebbe6b3e240b70bdd3a15f571dc4faeeda9606657cd5fc98941a934f0ad4ab541dc907554bd39219297c9a2d431264e4af5bb24046ba7658f28ff2402f63ce8
-
SSDEEP
98304:FXq/eMtInM2Z+Cw9uxz+5FGZpwh2LJ00ZwYV2kqXf0FGzECUc6exUh:YuMbuxzzHR+0KYV2kSIBCUc6I2
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\llcom.exe"C:\Users\Admin\AppData\Local\Temp\llcom.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
501KB
MD577b2470facddafcb618228aae50b2178
SHA1e1dd166582bc5f4159f263d29dfa1cb94fe5518e
SHA25657520a48c3a07fa05b53f71fcb2a4f157424d501e38a5bcbbc74e2af16030364
SHA512a8a1e47047b408a46c28ff429eca75371631a6a7e8d4ad8278c65f5064f3050c827134a3a8f0d9d391ebe792e8786576603a24b9160b842578bb2f20ecafb3d9
-
Filesize
40KB
-
Filesize
232KB
-
Filesize
9.9MB
-
Filesize
192KB
-
Filesize
312KB
-
Filesize
200KB
-
Filesize
4.1MB
-
Filesize
632KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
712KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
40KB
-
Filesize
9.9MB