Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-en-20210920
  • submitted
    12-10-2021 11:01

General

  • Target

    PCS TENDER PROFILE-20210920.exe

  • Size

    24KB

  • MD5

    8475c4b32e4c24086dcef73a6c05fe3e

  • SHA1

    b36a3579be00a9b414ff8e34dd6e1d944214c0c3

  • SHA256

    a44ab6dc43269d5f7f13aefc084b0a4d463126eea8a3de38979b5f5f96ea6a8d

  • SHA512

    d3d0e1ef48432ca5351ea919e7fe99388ed941e128c82b937d6eb94bd91c00fca6784e7df99498de68ae0ce8352dfa266d316c4bbfa716abef31a69a4922646b

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PCS TENDER PROFILE-20210920.exe
    "C:\Users\Admin\AppData\Local\Temp\PCS TENDER PROFILE-20210920.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1144-53-0x00000000012A0000-0x00000000012A1000-memory.dmp
    Filesize

    4KB

  • memory/1144-55-0x0000000076581000-0x0000000076583000-memory.dmp
    Filesize

    8KB

  • memory/1144-56-0x0000000004CF0000-0x0000000004CF1000-memory.dmp
    Filesize

    4KB