11f7307f314fccd2b1162443bb699d885f5e325b4b638a10997d98247463acfe | Triage

Analysis

max time kernel
123s
max time network
126s
platform
windows7_x64
resource
win7-en-20210920
submitted
13-10-2021 09:30

Sharing

Report Analysis Logs

General

Target

Request For New Qoute - Ist Order.exe
Size

25KB
MD5

065ee8fa88089e6576aad4b66d1322f8
SHA1

fadd1d9044f51212fa81c9f3fe676915c1f99d42
SHA256

11f7307f314fccd2b1162443bb699d885f5e325b4b638a10997d98247463acfe
SHA512

facc63e88bda539b169bae754cb5644e3df07a12d52bcfab0ae441ce6f00ee834f251ea81502617a11bb0da59436e427729cf914e7ff953499286170e8567324

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

Request For New Qoute - Ist Order.exe

description pid process

Token: SeDebugPrivilege 1756 Request For New Qoute - Ist Order.exe

C:\Users\Admin\AppData\Local\Temp\Request For New Qoute - Ist Order.exe
"C:\Users\Admin\AppData\Local\Temp\Request For New Qoute - Ist Order.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1756-53-0x0000000000B30000-0x0000000000B31000-memory.dmp

Filesize
4KB

Download
memory/1756-55-0x0000000076961000-0x0000000076963000-memory.dmp

Filesize
8KB

Download
memory/1756-56-0x0000000004DA0000-0x0000000004DA1000-memory.dmp

Filesize
4KB

Download