Analysis
-
max time kernel
133s -
max time network
135s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
06-06-2024 10:45
General
-
Target
mario_level_1.exe
-
Size
5.8MB
-
MD5
7c1300a990ad92ab84c8c4983aa9f508
-
SHA1
a538297c7becf1b5ded79703694af6359a33feb4
-
SHA256
b9e82fbe8ddb728fda1fcbedd40a4df46d480c0badd66dd8ed7888da161fb3b1
-
SHA512
cafd1529707f068c60e1d3286565830f31c61cb47ef45790ccc9396fdaecff20f875fac5d0224d4592e906c3187f4443887622d16077edcc35c9da3d7f8808be
-
SSDEEP
98304:Se/AVv+URlRLH9dM8Se/TjnNYF/9cXq9535RPPl+QLXT1FoK0mwtVXudvz1/gNWG:Sewv+UB5eA3nagajzn1L0dLedK7
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\mario_level_1.exe"C:\Users\Admin\AppData\Local\Temp\mario_level_1.exe"1⤵
- Enumerates connected drives
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3fc1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
-
Filesize
128KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
44KB
-
Filesize
220KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
24KB
-
Filesize
28KB
-
Filesize
40KB
-
Filesize
28KB
-
Filesize
28KB
-
Filesize
388KB
-
Filesize
32KB
-
Filesize
2.4MB