Resubmissions
21/05/2024, 22:43
240521-2na8aacf89 721/05/2024, 22:40
240521-2l11xscf41 721/05/2024, 22:35
240521-2h2haace86 7Analysis
-
max time kernel
142s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
21/05/2024, 22:35
General
-
Target
$TEMP/keygen.exe
-
Size
508KB
-
MD5
a859e9ed9d054580133620896a3b3f48
-
SHA1
2ba853f7443ee30c830b0fedb2bb31b5072d4db2
-
SHA256
1c1328bbd291b200cfcd1bddcadb646e1b3f0a4ef47c676e797091d3426cf2ef
-
SHA512
a7e3c3c8620a06591d69e6c2149ecc5dadef662baa5ac9e9d4e108d15dd6d6433e4c09209c597af291a6022c64bd76ec34da95f95b0de15e48977c5970bd493a
-
SSDEEP
6144:tPA4GcGvY6Q4rOQonRBVSszRNAOBuGJxWNJFQP6WGBIU/qulYJuvjJbfT3:tpGVQ4KQonRBVrzRNuvWGBIU/qY6uRT3
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2f81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB