Analysis
-
max time kernel
586s -
max time network
431s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
27/07/2024, 08:24
General
-
Target
Yvcy6xVFyVa7CNFx (1).exe
-
Size
12.5MB
-
MD5
6dcafe205c42486ea9100ecc7b783e19
-
SHA1
a0e9937036cdbaa7a928418c67a11cd2cdc48842
-
SHA256
e3b7264fa3bf1b63853726decbf86bbabb7704359b4bee9639120e6929e10def
-
SHA512
8385cbd582cc4fef9cdbbcdb66411c4c42f32405945fdf215bb6cf2f943425f969f00ece0a2eb92153672839e5bfb61dd59ead5089c54444fb2c26881b778a0c
-
SSDEEP
196608:ugDy7lLb2gpkYaFlBN+46/e8wS93L55Pd0tSHWt0Z6bd1p6ArTmRUb:ugy32gGFlz+4meTS9WWY0iJeU
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
cURL User-Agent 1 IoCs
Uses User-Agent string associated with cURL utility.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Yvcy6xVFyVa7CNFx (1).exe"C:\Users\Admin\AppData\Local\Temp\Yvcy6xVFyVa7CNFx (1).exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x41c 0x33c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.3MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
20.5MB
-
Filesize
20.5MB
-
Filesize
7.3MB
-
Filesize
20.5MB
-
Filesize
7.3MB
-
Filesize
20.5MB