Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27/05/2024, 06:07
General
-
Target
Kong.exe
-
Size
1.7MB
-
MD5
cd1684a44d1438ed2d9219ac4096cb18
-
SHA1
d7d4e7755adeea59b1b41c82073981498fe4d238
-
SHA256
64bbb9fd022e8c22eebec9ca120ffae52d18320387f474026e2dbbae6fa72da5
-
SHA512
e4bcdc83912a4f8de51c2169ab97f02cbb7513ad478ff8412fef94febeae80676c13af8fa42349c5b72ec8d6bf592452292aa4f7d9e02d68875ea37ec71f3d50
-
SSDEEP
49152:n4qgpI6JC0FKVbd1fWozTijNTFydj2NY0jnCrNWZ/:n4qgpJJ1EFWoTiBTFQSNY0jCr
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Kong.exe"C:\Users\Admin\AppData\Local\Temp\Kong.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4KB