Analysis
-
max time kernel
36s -
max time network
39s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15/10/2024, 01:37
General
-
Target
sla.exe
-
Size
10.1MB
-
MD5
c30cfb125c97e2a861b018da9dd2a739
-
SHA1
b160e47c7f6fd024df188be5ea46ea2e52aec45c
-
SHA256
d050e8a18fa8a03831a2e9ca61fb364c31b953a9c09596c5ecbc1084b03087f6
-
SHA512
1911f473e28427ce7236afd59dc6d8b0242836100905cf9e1fc680d96fa4acbaaabcb0431db213c3017a49be31eb10ccb27df7df193c719af0747194f715495f
-
SSDEEP
196608:2vcEjiEy+dBy+zGOYRoZKmKmrYD2t1psCPh0odQ9GMBE:J+Xy+hYU22t1psJo
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\sla.exe"C:\Users\Admin\AppData\Local\Temp\sla.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
35.0MB
-
Filesize
64KB
-
Filesize
1.8MB
-
Filesize
35.0MB