Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
30/05/2024, 03:56
General
-
Target
de05679a06c2b48b06540d39eda411c78107bf12e2a703d9dda75a9c1c90cc51.exe
-
Size
1.5MB
-
MD5
0dd753eebb4b5eee866d23a267faef93
-
SHA1
a0b114c2cb11061157009352213c921ebece6975
-
SHA256
de05679a06c2b48b06540d39eda411c78107bf12e2a703d9dda75a9c1c90cc51
-
SHA512
1f7311480b9a90305af19cf2a8ccce386b8a730d7d94cb5c42770c9925a44610b9e93c19f5cedc768911bc557ddb0b81bd77d8d5eba6303dbc71b68dc6f1bcf4
-
SSDEEP
12288:Kt/eSMIO74u8k7UtnzPgGeB0dPoIlaNyF/ofCVGGfX134R9kMKy:u/et/HU9zPjeidP1Yi/dGyA
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\de05679a06c2b48b06540d39eda411c78107bf12e2a703d9dda75a9c1c90cc51.exe"C:\Users\Admin\AppData\Local\Temp\de05679a06c2b48b06540d39eda411c78107bf12e2a703d9dda75a9c1c90cc51.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.5MB