Analysis
-
max time kernel
90s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 04:11
General
-
Target
6fb3aa34d311c55d5719807f72a3f84d07997e3faf901126c206f95f816508e5N.exe
-
Size
1.7MB
-
MD5
b601897b98f565163f449f1a320d1090
-
SHA1
168d88fc7648a087ecce4777b20a24bbb6669116
-
SHA256
6fb3aa34d311c55d5719807f72a3f84d07997e3faf901126c206f95f816508e5
-
SHA512
efbf6421917daf4009c1525e5abfaf17b97430977d4fb58c2fc3f3d4ff7a6fca37f6254062df73511d4f14fe9b99c71dcdcb0619f6b5e43c9314879c4e6d5c95
-
SSDEEP
24576:Pqfj/pKWIEcpP2WtjiLjrjCv8AAaIJr2CuLpZ6dqCevofVOhZjgw9pmF8wQOToDX:yU1u5yvZABRgNgECevvsc/wQO0Dx
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6fb3aa34d311c55d5719807f72a3f84d07997e3faf901126c206f95f816508e5N.exe"C:\Users\Admin\AppData\Local\Temp\6fb3aa34d311c55d5719807f72a3f84d07997e3faf901126c206f95f816508e5N.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.7MB
-
Filesize
10.8MB
-
Filesize
56KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB