Analysis
-
max time kernel
104s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18/08/2024, 08:51
General
-
Target
589e5b9a134b87c9106f4a0da4257b40N.exe
-
Size
1.5MB
-
MD5
589e5b9a134b87c9106f4a0da4257b40
-
SHA1
8ae836cc28af8beceae292f86766c31670a4e1aa
-
SHA256
4cc6fcc8598e3f856234862c53594aae1dd49c9d552d3058b4a20d97c4fe8b4b
-
SHA512
df3840834be598539d23d3a300717a21db9505168f393617b6d10c7cbfe287aae6535f309f38cb797f94d47dd03cba858467ebb50c357dc5e6ceb26ab928e0b5
-
SSDEEP
24576:A/9RFESSeLVy9EyCfwlen6xY/DjQIZVGV0UUTsW2DnyyNaK+:Gt098fDn6+/gIZV+0nsW2Oyz+
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\589e5b9a134b87c9106f4a0da4257b40N.exe"C:\Users\Admin\AppData\Local\Temp\589e5b9a134b87c9106f4a0da4257b40N.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD58a1766b6cfcbe3932d4e6cff57bf1a7a
SHA1590ae449ef7cfe5dc1e213d40c9d22f4b5585e99
SHA2560c725833833dff72857d97e63fdc14fb23093dee20b62b6e30437a390aeca600
SHA512ce608311a68622673785fd57803ab499423744d051c05a80761710546b2e5c3c1a5ecec1328b321b87b53da794bef4a0dda22ca4ac24de079f861e19ffcacd49
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
680KB
-
Filesize
680KB