Analysis
-
max time kernel
1792s -
max time network
1164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19/07/2024, 23:55
General
-
Target
$TEMP/keygen.exe
-
Size
381KB
-
MD5
db2e56a4dd188f2d7521ce11481432c0
-
SHA1
822d5251d42dc56674a59f1e20103990cd8aef8c
-
SHA256
2f5e714271e5206dafb32d77a69859243e44b85321cc39b985e44303f200a185
-
SHA512
49762ae5f9dfb95eec33eec6c59ce8e433ed45ee4b4f44b59f22f108b4e29eb9d6e1e641f0569898a651f6ad36d64287ecf87c40aee780c90ae72b714ca10ab8
-
SSDEEP
6144:Syztgw3QmFzwDK14dHTDtes6MRjLhzjPrzwuyXfTfo:hzh3NeWSzBe3MjLhzjSo
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x508 0x3141⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
240KB
-
Filesize
76KB
-
Filesize
240KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB