Overview

overview

1

Static

static

Product List.exe

windows7_x64

1

Product List.exe

windows10_x64

1

Analysis

  • max time kernel
    130s
  • max time network
    131s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    08-04-2021 06:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Product List.exe

  • Size

    59KB

  • MD5

    e206bbb108e3a2e7a554897f9f4d489c

  • SHA1

    982f441a30b5945f131350fded1587a41f848d78

  • SHA256

    254f4133d2bfa7ca67fdc4704022cd1c22fb1e22957c90a29626ed8f2d189a3a

  • SHA512

    53c9d50069d7c68cc028bf512fb8c1b46a05d9f165f6a5d07e4616e547911bf5f6f697275990a0a9989f9a612a17d8c105f42bcf199c70aa57ff63766ce30e52

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Product List.exe
    "C:\Users\Admin\AppData\Local\Temp\Product List.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1400-2-0x00007FF98BE30000-0x00007FF98C81C000-memory.dmp
    Filesize

    9.9MB

    Download
  • memory/1400-3-0x0000000000920000-0x0000000000921000-memory.dmp
    Filesize

    4KB

    Download
  • memory/1400-5-0x0000000000E40000-0x0000000000E42000-memory.dmp
    Filesize

    8KB

    Download