Analysis
-
max time kernel
291s -
max time network
274s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12/10/2024, 15:17
General
-
Target
SashPub/Sash.exe
-
Size
7.0MB
-
MD5
d08f7a1cd6fd216836dadae4c4dc3d9e
-
SHA1
af68023a678637547df7bb2d90922da8e048a13e
-
SHA256
1780d37f52a6e9cb169c233e45eb0786692705130c3176e6977fdf855e6003eb
-
SHA512
f34cc8cb3aa1dc9414b103d76df5a032be1356091e94eed31a6cd66eceac8516b20219d8463be1e4beb3d4e0265be126681cdf8de925371779210f10e91c661c
-
SSDEEP
98304:7S7tnnkFkpTTn0nyJsJ84ukrUTtr6M3/rVu5y:7MnkFkVobiF
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SashPub\Sash.exe"C:\Users\Admin\AppData\Local\Temp\SashPub\Sash.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2f4 0x4481⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
112KB
-
Filesize
1.2MB
-
Filesize
348KB
-
Filesize
488KB
-
Filesize
64KB
-
Filesize
508KB
-
Filesize
84KB
-
Filesize
116KB
-
Filesize
6.1MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
488KB
-
Filesize
1.2MB
-
Filesize
6.1MB
-
Filesize
6.1MB
-
Filesize
6.1MB