Analysis
-
max time kernel
168s -
max time network
1775s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
01/07/2024, 02:51
General
-
Target
Intelligent standby list cleaner ISLC.exe
-
Size
428KB
-
MD5
ea5284d23a646dd3a44df513352e33f9
-
SHA1
31f4899f3d1de8db606f1b751f0346759c901ae0
-
SHA256
8d1bf07e9408b7383485792597bd2f35339b783ee817a71384060221c7230a14
-
SHA512
d6e1411bda10ae8280d7d1697e6fa0313b418729803967c7edc61ceed3a52a110ed004aa79a5556e7ff24b2944999783ae8f65ae9c0c4e38e3006c70d2a9df3b
-
SSDEEP
12288:qudeAW7V7uikFg9V7uikFg5V7uikFgMpF:TW7lubg9lubg5lubgMpF
Score
1/10
Malware Config
Signatures
-
Modifies system certificate store 2 TTPs 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 27 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Intelligent standby list cleaner ISLC.exe"C:\Users\Admin\AppData\Local\Temp\Intelligent standby list cleaner ISLC.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
440KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
224KB
-
Filesize
10.8MB
-
Filesize
56KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB