Resubmissions
18-07-2024 07:25
240718-h84wjs1hpb 1018-07-2024 07:19
240718-h51pqa1gng 1017-07-2024 20:55
240717-zqkhmaydmq 1017-07-2024 19:21
240717-x2pwdaycjb 10Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
17-07-2024 20:55
General
-
Target
72716d15ea7d118b8c99dbcb15114188abe468718c876ac52b0779161ef7e821.exe
-
Size
703KB
-
MD5
d7c62a22cc1a832ba2ce0bfd1c4f9e9c
-
SHA1
a484b5a49a5b94f045100dd5e659b9504ed99211
-
SHA256
72716d15ea7d118b8c99dbcb15114188abe468718c876ac52b0779161ef7e821
-
SHA512
7c036f46c6c5a34d991d277c3ecf3c8abdf3a70042c40aaa3c20ce2f3e02a5a63200530587c2980ba5e000a7f1394a33390e63ec53782892b27874e293dff1c6
-
SSDEEP
12288:Qu/mk3LQLwumO7mL945Hj1wcBsXcDBif+w+nstV7uikFg:5+WLQLP7mL9eDb+Msfsnstlubg
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\72716d15ea7d118b8c99dbcb15114188abe468718c876ac52b0779161ef7e821.exe"C:\Users\Admin\AppData\Local\Temp\72716d15ea7d118b8c99dbcb15114188abe468718c876ac52b0779161ef7e821.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
328KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB