Analysis
-
max time kernel
437s -
max time network
1158s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09/10/2024, 16:00
General
-
Target
AntiZapret/tools/winws.exe
-
Size
234KB
-
MD5
8c624e64742bc19447d52f61edec52db
-
SHA1
1e700e2dd61b5d566a651433dc86bd95a6d54449
-
SHA256
13fd7a9c6f7c98239a61a212f69211a0f19159b2e8cdae8b1efc57d35cdcd5ad
-
SHA512
f676f7aa863fd13494186d4be597c19e49dc8245f6a98a2e9e2f1d09aa9e4cbf7a87c552e49359347b24b46cd1eddfb6edcfcbd6f4ff4d24888831ff182c952a
-
SSDEEP
3072:v8eKEoQ4poZkFUIIggeAtqCijmtvzb20QTE7Eh2mS89QB+5Us6V:vtp5GoZ7+VAtqw7S0R7E9Ou8V
Score
5/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AntiZapret\tools\winws.exe"C:\Users\Admin\AppData\Local\Temp\AntiZapret\tools\winws.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
3.1MB
-
Filesize
76KB