7e1f0c4593e27a0841305ca73d83f6ccdd900ecf8ed8863feb9a301367c5dac1 | Triage

Analysis

max time kernel
135s
max time network
144s
platform
windows7_x64
resource
win7-en-20211208
submitted
01-02-2022 12:54

Sharing

Report Analysis Logs

General

Target

7e1f0c4593e27a0841305ca73d83f6ccdd900ecf8ed8863feb9a301367c5dac1.exe
Size

16KB
MD5

bcba1bfc7f8834dbdbdf60ef532b9029
SHA1

eb39de6f3e9eeaca8cfea27a641a0258ada0640e
SHA256

7e1f0c4593e27a0841305ca73d83f6ccdd900ecf8ed8863feb9a301367c5dac1
SHA512

bed3629ac2a66ea23a5bdfa90facf9000c557ad623b3f7d5df1d935d9e3c8a8448765bc9ecb9635ecbfbfe7446624db44fc20d5fbefdb26c992e95d0eb6430bc

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

7e1f0c4593e27a0841305ca73d83f6ccdd900ecf8ed8863feb9a301367c5dac1.exe

description pid process

Token: SeDebugPrivilege 1468 7e1f0c4593e27a0841305ca73d83f6ccdd900ecf8ed8863feb9a301367c5dac1.exe

C:\Users\Admin\AppData\Local\Temp\7e1f0c4593e27a0841305ca73d83f6ccdd900ecf8ed8863feb9a301367c5dac1.exe
"C:\Users\Admin\AppData\Local\Temp\7e1f0c4593e27a0841305ca73d83f6ccdd900ecf8ed8863feb9a301367c5dac1.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1468-54-0x0000000001EB0000-0x0000000001EB2000-memory.dmp

Filesize
8KB

Download
memory/1468-55-0x000007FEF2D60000-0x000007FEF3DF6000-memory.dmp

Filesize
16.6MB

Download