Resubmissions
13-07-2024 09:54
240713-lxcvgawdmn 1013-07-2024 09:52
240713-lv46yawdkj 1013-07-2024 09:46
240713-lrz3tayajc 10Analysis
-
max time kernel
840s -
max time network
843s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
13-07-2024 09:52
General
-
Target
93386ea79c58a95c033e66da99d155264f0028a43973a9a4496f3fc8c89db0b9.exe
-
Size
361KB
-
MD5
7be37dff77a6257da2b430ab7c483612
-
SHA1
028356262caa0076adb3c0a0ad87e4418d386ec8
-
SHA256
93386ea79c58a95c033e66da99d155264f0028a43973a9a4496f3fc8c89db0b9
-
SHA512
09dae1c1cb5b07dd4099d21db53f3d08a5ac354777086e666bd872532a37539a67455c35768e78cfc4e181f03bd67ba546aace35d2b50c7aa68a2433c317634a
-
SSDEEP
3072:6pbgo3vg+rJrkQVOUPrxLExK08A+MQ20AFHxH32Hdxkq51:Ubf3vg+rOgOyrNEI3AxQUHK
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\93386ea79c58a95c033e66da99d155264f0028a43973a9a4496f3fc8c89db0b9.exe"C:\Users\Admin\AppData\Local\Temp\93386ea79c58a95c033e66da99d155264f0028a43973a9a4496f3fc8c89db0b9.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 468 -s 11122⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
384KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB