Analysis
-
max time kernel
1800s -
max time network
1801s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
17-07-2024 19:21
General
-
Target
21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01.exe
-
Size
708KB
-
MD5
987a06a5c02be92cdeae2a99a408a716
-
SHA1
31e4c64f1fcff7824b023e86482e75870389edef
-
SHA256
21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01
-
SHA512
90db12153f5abd1f8d20a89a473c46f0577ffc2c3a681f4f2bd68f53b8cd2d45c372bce6e0d11d2832ae223eebcb2b9a8a1dc806b5cd8a510134cad830c2596e
-
SSDEEP
12288:VROJm7hOOdN2++KEjDz/lnp2WBILtj+fITU4Td9T31r6U2dEV7uikFg:VROJ8hjkLKgP/n2WaLtj+fINR979N/l/
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01.exe"C:\Users\Admin\AppData\Local\Temp\21e1bc4340221fbccee28d59333c20b20755e34e2f3391b90837172bd07fbf01.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
328KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4KB