Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/06/2024, 16:40 UTC

General

  • Target

    trichloromethane-safety.exe

  • Size

    83KB

  • MD5

    1453f56916c0ea96b9ba5b49f09757e2

  • SHA1

    3e25edc13b69e5db4769f061f586e42b812996bf

  • SHA256

    da79e0317881f0600ddaddf593184b1e7d6eb54604de089e4d625741e21c004b

  • SHA512

    37febf9c7bd3f35b45de356e8dc92a9bd5e065471669cb9afdb7048308df0c852b3cbfc5f2a3cab2887d67c9dab4f2fb2bb21ee9de42d13b700784367d1f8ca6

  • SSDEEP

    1536:X5RkE0HODVj5XVgyi31RRzuo3tpwOcr2zS5KTV8yYJcsWrcd6/MAedu:X590HODVViFRRz3dpxe2zSwTXoj6/Mz0

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\trichloromethane-safety.exe
    "C:\Users\Admin\AppData\Local\Temp\trichloromethane-safety.exe"
    1⤵
      PID:4112
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x3d4 0x464
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1404

    Network

      No results found
    • 52.111.229.48:443
      322 B
      7
    No results found

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.