Analysis
-
max time kernel
151s -
max time network
209s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
05/08/2024, 18:37
General
-
Target
M Centers.exe
-
Size
1.6MB
-
MD5
1d3d75fa1c81b55d68500d95a92807fb
-
SHA1
c45be1e05788005a24e4c73628d1f85003890957
-
SHA256
5f405489a7f6c67bbcc130ebbb272a99bde94b0d01b1b958f6f05580fb58a2d3
-
SHA512
b910ed4d71503d888d004b28b4991f8d5b8635ad0fb708cc987f4996a1f4e6ee22469f0c9c29946913988fea3163c5f6e313fdf643249eba4adf9d5df0cfcc83
-
SSDEEP
49152:Lj2I6gR13Be4vZ+5o12w1cRTTQAwnnsn3nmB:nPRNXBGhw1wTEAwnnsn3nmB
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\M Centers.exe"C:\Users\Admin\AppData\Local\Temp\M Centers.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.6MB
-
Filesize
248KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
9.5MB
-
Filesize
336KB
-
Filesize
744KB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB