Analysis

  • max time kernel
    139s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7v20210410
  • submitted
    27-07-2021 15:28

General

  • Target

    Images.exe

  • Size

    973KB

  • MD5

    82489381d072392f3075161bbb1ec8b8

  • SHA1

    5ac44b1ad6d31f14e22013792aed5033af1bed97

  • SHA256

    2307054debb98d7c9ca5b5fbce5ca1210c49563dbe01d2fa28cc24099a2db022

  • SHA512

    e53d7c446b87211327033139b6d0b539ed7aa0d2db660eaa44ad3d96499a03a26e96a887c47250c7ee685ae7a7bd3cc71aa49097c10ba6371f928a2cdf2c402d

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Images.exe
    "C:\Users\Admin\AppData\Local\Temp\Images.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1208-59-0x0000000000270000-0x0000000000271000-memory.dmp
    Filesize

    4KB

  • memory/1208-61-0x0000000004E30000-0x0000000004E31000-memory.dmp
    Filesize

    4KB

  • memory/1208-62-0x0000000000480000-0x00000000004AD000-memory.dmp
    Filesize

    180KB