b9af69ac821a649f211c99e3edf32a76a213e9450b5e972a6cdda5758af530dd

max time kernel
140s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 01:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

osk.exe
Size

556KB
MD5

8c818d3b035f59617219ef5ca11ca719
SHA1

e62f9333eee8a10216702dbafcdee0bffc6a6304
SHA256

6923821e5f4d8105693fa37230717a2b3ab354db96ad716e596a2ec9f43dec45
SHA512

a7320efb278658d2d2e3604eeda94a83b58b5882206541599d6f3ca8f49e6f0ce72594f67342cfaf22e3dfbcf8524ae6d824c75286964ce6dd82cb9a4cefcf44
SSDEEP

6144:8pYCH/VPNW3QuJgUjE4dac1Oc5RNU0w7lslnCUGw/xIRLtxIRLuovZ:fg/DMQggUjBU0w7lzaoo

Score

3^/10

persistence privilege_escalation

Malware Config

Signatures

Event Triggered Execution: Accessibility Features 1 TTPs
Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.
persistence privilege_escalation

Accessibility Features
T1546.008

C:\Users\Admin\AppData\Local\Temp\osk.exe
"C:\Users\Admin\AppData\Local\Temp\osk.exe"
1⤵
PID:4896

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Privilege Escalation

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...

Resubmissions

Analysis