Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
24/05/2024, 07:23
General
-
Target
d9e7a3058eaf1a8a272a732945df7ebb4103dc635c040d0d74516d0a4283cccb.exe
-
Size
911KB
-
MD5
d2d074d3fbde9c95ff66744e807d4e81
-
SHA1
da9135c4a2bc666f57a22d2797bd2c37330bc7e7
-
SHA256
d9e7a3058eaf1a8a272a732945df7ebb4103dc635c040d0d74516d0a4283cccb
-
SHA512
2be327e39c8a827dac24b7987df0a1e62a140c5db46528cdd48ea78bd40a17f9d6c73027fd82823b23325622c25c7feea9b2823cc13675bbf8098641c81dde77
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9e7a3058eaf1a8a272a732945df7ebb4103dc635c040d0d74516d0a4283cccb.exe"C:\Users\Admin\AppData\Local\Temp\d9e7a3058eaf1a8a272a732945df7ebb4103dc635c040d0d74516d0a4283cccb.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB