Overview

overview

10

Static

static

31ff33110c...f2.exe

windows7_x64

1

31ff33110c...f2.exe

windows10_x64

10

Analysis

  • max time kernel
    69s
  • max time network
    68s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    17/11/2020, 11:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    31ff33110c9bb8f01cc0998eaf5320f2.exe
  • Size 1019KB
  • Sample201117-48ntndd8te
  • SHA256 e4c96e573cf689f5b8a8857995cf3216e89f4f0529334e0eafa611e9c775bbd2
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe
    "C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1096
    • C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe
      "C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe"
      2⤵
        PID:1568
      • C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe
        "C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe"
        2⤵
          PID:1064
        • C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe
          "C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe"
          2⤵
            PID:872
          • C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe
            "C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe"
            2⤵
              PID:1036
            • C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe
              "C:\Users\Admin\AppData\Local\Temp\31ff33110c9bb8f01cc0998eaf5320f2.exe"
              2⤵
                PID:564

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  memory/1096-0-0x0000000074110000-0x00000000747FE000-memory.dmp
                  Download

                  memory/1096-1-0x00000000003C0000-0x00000000003C1000-memory.dmp
                  Download

                  memory/1096-3-0x00000000005E0000-0x0000000000650000-memory.dmp
                  Download

                  memory/1096-4-0x0000000005A00000-0x0000000005A21000-memory.dmp
                  Download

                  memory/1096-6-0x0000000000380000-0x0000000000394000-memory.dmp
                  Download

                  memory/1096-7-0x0000000005BE0000-0x0000000005C32000-memory.dmp
                  Download

                  memory/1096-8-0x0000000000650000-0x0000000000656000-memory.dmp
                  Download

                  memory/1096-9-0x00000000041B0000-0x00000000041CD000-memory.dmp
                  Download