Analysis
-
max time kernel
1791s -
max time network
1172s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
-
submitted
09/06/2024, 01:35
General
-
Target
KeyGen.exe
-
Size
973KB
-
MD5
9431c78e394ab96709349391dda60aeb
-
SHA1
dfc15a782c3abcfbbf15ddd31f628305ac5fe620
-
SHA256
06c97ce5947a4060370086fdebc3d47139c16dda242e58a843c4fc88edaf260a
-
SHA512
7befe803d2a588b3fafb46178dfcacd989ee0b8759d3462171c975a8fc800371741e1a030089afd9b099b2723200089ceb37edc47bb904baecceb32ccee52f1f
-
SSDEEP
24576:8a8xnH98GXpOIjuICWYRm2ufCyZtqNcGqRoyDEJ:YxnHmGXQICImRm2gqSG5yAJ
Malware Config
Signatures
-
Loads dropped DLL 5 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KeyGen.exe"C:\Users\Admin\AppData\Local\Temp\KeyGen.exe"1⤵
- Loads dropped DLL
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004D81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
35KB
MD576a9565c5f51775719eebda1f25530a5
SHA1332feae4dba6b4a93bebea7a881a0fa758891091
SHA256a1a7c4f74d4fe7784ed03709e5f946b94cc10a64e3ae0ad5a9a3bece9a8a2c0a
SHA51279c9af704d1626cad9d44470585baf8d5f082b5d77c285fc6ae4862e99439f838fe9b1e745f8f2487fa64d5d7304954f66d0cef222db4dc9095a7294172094e9
-
Filesize
12KB
MD5e6144fb36c1fdc6ba1d1afa9632588f8
SHA1c4964264c6600fde210a644b639e2ea25ecb67e6
SHA256b141412d0611571df381c26186b3fc438c725d6e45ad66fd76413322c17a9ac6
SHA512400ca4e2ad987a88429da21d795f7365bd230ed4225e19b7841dcc09606e0afde2f3cc31aa8be4ee83dd3c6b0339cb2c13953523bdc8d2f547d953c6c6c8d339
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
-
Filesize
1000KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
4KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB
-
Filesize
76KB
-
Filesize
1000KB