Analysis
-
max time kernel
22s -
max time network
24s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27/09/2024, 16:39
General
-
Target
IMPACTALLIN1.exe
-
Size
14.9MB
-
MD5
075b13db6cfe4b4ce2610e1d062d49ca
-
SHA1
19ba8821dfff96735f45901b6a8422698e3a8f05
-
SHA256
d0eb5f80bff682180e643fd0133d4561d1e9ed6b3690f2f95e9839cf53d088e8
-
SHA512
f778c9b9fea526028aeb8d980367349d08046ec13193c2e2993245d7a658ed21e47afb51f867c60ee978d0064c6563fc15f1724198fd79e922962ca5f6c5d0fa
-
SSDEEP
393216:DPWk1FNBxLt/hjcT02FF6gzql7FJZ8M8D/aZd7xJCL:vBxVhIT02FFnOlRJZo2b7PM
Score
1/10
Malware Config
Signatures
-
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 10 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of FindShellTrayWindow 20 IoCs
-
Suspicious use of SendNotifyMessage 20 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IMPACTALLIN1.exe"C:\Users\Admin\AppData\Local\Temp\IMPACTALLIN1.exe"1⤵
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /71⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB