Overview

overview

8

Static

static

10

3c55772795...67.exe

windows7_x64

8

3c55772795...67.exe

windows10-2004_x64

8

Analysis

  • max time kernel
    4294178s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20220223-en
  • submitted
    26-02-2022 10:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3c557727953a8f6b4788984464fb77741b821991acbf5e746aebdd02615b1767.exe

  • Size

    114KB

  • MD5

    decc2726599edcae8d1d1d0ca99d83a6

  • SHA1

    0d8cc992f279ec45e8b8dfd05a700ff1f0437f29

  • SHA256

    3c557727953a8f6b4788984464fb77741b821991acbf5e746aebdd02615b1767

  • SHA512

    1096ccabe0c99ab73bbc92c645814b6590f5a925801eb3a97e9930e3bc668738f8852e83628474836ba15983b6660eb5c2f2741e925d16877991ca89be47f49a

Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Suspicious behavior: LoadsDriver 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c557727953a8f6b4788984464fb77741b821991acbf5e746aebdd02615b1767.exe
    "C:\Users\Admin\AppData\Local\Temp\3c557727953a8f6b4788984464fb77741b821991acbf5e746aebdd02615b1767.exe"
    1⤵
    • Drops file in Drivers directory
    • Suspicious use of AdjustPrivilegeToken
    PID:964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/964-54-0x0000000075131000-0x0000000075133000-memory.dmp
    Filesize

    8KB

    Download