Analysis
-
max time kernel
145s -
max time network
110s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
30-05-2024 14:26
General
-
Target
Zombie1_1_4_FY_P.exe
-
Size
923KB
-
MD5
68e84502803f32475e1bdcbe21ebcfcf
-
SHA1
bde54cc148c0574d95921ee318592a78ea56dd7b
-
SHA256
baac86b23931308454d36b04bd2d3f053273070023b3e6e4f70d2cfeaa3c8461
-
SHA512
125f8a751dcc852981fcf0656ce6ea6688d4fcd690c46b3d84dbb01dd04e41450b3f40516f73c12d48a02d83b8707fb8b2ecf92990782f1771d8b70505483a33
-
SSDEEP
12288:9EDCJJDXb8qWvvMyesvleMkWzChpBTfgYvVtcgwSuLnKtTLTqrX:9mQGbvNvjkJPKuMlXzz
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 22 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Zombie1_1_4_FY_P.exe"C:\Users\Admin\AppData\Local\Temp\Zombie1_1_4_FY_P.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
716KB
-
Filesize
4KB