Analysis
-
max time kernel
140s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
24/06/2024, 03:59
General
-
Target
0a2ea9cdbd6c323c9902cc3513e56cb53e2d5b1c15a639c12b4c14b190e10860.exe
-
Size
7.9MB
-
MD5
5c60f0e42a1e6f4f596e04f9dfbfcb19
-
SHA1
b4168299debc66e2cfdf066ecd831b38c685c019
-
SHA256
0a2ea9cdbd6c323c9902cc3513e56cb53e2d5b1c15a639c12b4c14b190e10860
-
SHA512
159aecb21f62b73a802a4154addd366bd09a4e76989a37e731799fa96f3917acdc1e17e49115add3a88ba663b7fb15c2cfc8ea2bdae0a8a5fea5bacda9887c51
-
SSDEEP
196608:9ns434pdSxiwAcoKsEs0WIPD2ZgUDSyNKYiYVVmHIUfIMPi:9nkj3tc/sEssb2ZgUvNnLm9fIMPi
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 3 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a2ea9cdbd6c323c9902cc3513e56cb53e2d5b1c15a639c12b4c14b190e10860.exe"C:\Users\Admin\AppData\Local\Temp\0a2ea9cdbd6c323c9902cc3513e56cb53e2d5b1c15a639c12b4c14b190e10860.exe"1⤵
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16.1MB
-
Filesize
4KB
-
Filesize
16.1MB
-
Filesize
16.1MB
-
Filesize
16.1MB
-
Filesize
276KB
-
Filesize
16.1MB
-
Filesize
16.1MB