Analysis
-
max time kernel
137s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
27-06-2024 22:06
General
-
Target
Frozen Spoofer/permunban.exe
-
Size
33.1MB
-
MD5
26a0ee034198a3163d7a4855dd246e63
-
SHA1
71fbd2e16a4c4ddaba065f8fd1d81e9f365f38a7
-
SHA256
28eae7cb4ab18555df3a1209513dffbfc27a8a098ad0b36754ac82eda131fd88
-
SHA512
88d1c582dbaca74d3b28541d465c2d678c594763e6098e327cc14a86da237e59b9444e18aac31da3e4b4fc77c8124363a66b64564dc40234a93d7b1fb18a9d04
-
SSDEEP
786432:5C1LbwgI7+I+w32BcdcfgEbZzIdUieRWacVqGiiihca:AYgI7GY2eGjbZzIheR/cVqGwh
Score
7/10
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 2 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Frozen Spoofer\permunban.exe"C:\Users\Admin\AppData\Local\Temp\Frozen Spoofer\permunban.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
33.1MB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
352KB
-
Filesize
72KB
-
Filesize
40KB
-
Filesize
3.8MB
-
Filesize
32.9MB
-
Filesize
240KB
-
Filesize
624KB
-
Filesize
4KB
-
Filesize
7.7MB