Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
15-06-2024 10:16
General
-
Target
87f6713235f57cc061866f417a3435c5af36fe78d53cff1da1793b6bb91d4bf9.exe
-
Size
8.9MB
-
MD5
1b710b867316cc9ab04051ab6171d5ea
-
SHA1
2d1ba70682910401c0e3416976d1bd1ae76fea33
-
SHA256
87f6713235f57cc061866f417a3435c5af36fe78d53cff1da1793b6bb91d4bf9
-
SHA512
7a5076ac64b546780bec9d6c397a747db3a053b47a2f4fff062c203a2c13833917fd294f1c42a113d5705ac1a28ee129c3b8cea5ba142969ce3284f85857ae0a
-
SSDEEP
196608:BciTpIdkGGHWzFLz2WjPT+tnh249hEMjFhbm74l7LzoMyqE:BRk5VYWLT7hMnmCoMT
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 50 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\87f6713235f57cc061866f417a3435c5af36fe78d53cff1da1793b6bb91d4bf9.exe"C:\Users\Admin\AppData\Local\Temp\87f6713235f57cc061866f417a3435c5af36fe78d53cff1da1793b6bb91d4bf9.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.0MB
-
Filesize
19.8MB
-
Filesize
19.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
19.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
19.8MB
-
Filesize
19.8MB
-
Filesize
5.0MB
-
Filesize
19.8MB