Overview

overview

10

Static

static

4b418627dc...e6.exe

windows7_x64

10

4b418627dc...e6.exe

windows10-2004_x64

1

Analysis

  • max time kernel
    152s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220112
  • submitted
    09-03-2022 13:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4b418627dc8f28c34a79776bbd7ac1cc28789531036ccb542c1410b64d14afe6.exe

  • Size

    58KB

  • MD5

    a805d5e21e949f58a30079d0e40c914c

  • SHA1

    76e5225ea7358bf7c3b86c3a670ed75559f025fa

  • SHA256

    4b418627dc8f28c34a79776bbd7ac1cc28789531036ccb542c1410b64d14afe6

  • SHA512

    4c8d0710afc66b67d6edc695494b87e7516489382ddd805af881601db4241edf87e62d1e654cf4ac5e667a539ef02356f914028a673ffc1825ff225d562a761b

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b418627dc8f28c34a79776bbd7ac1cc28789531036ccb542c1410b64d14afe6.exe
    "C:\Users\Admin\AppData\Local\Temp\4b418627dc8f28c34a79776bbd7ac1cc28789531036ccb542c1410b64d14afe6.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/752-130-0x0000000074610000-0x0000000074DC0000-memory.dmp
    Filesize

    7.7MB

    Download
  • memory/752-131-0x0000000000750000-0x0000000000764000-memory.dmp
    Filesize

    80KB

    Download
  • memory/752-132-0x0000000005780000-0x0000000005D24000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/752-133-0x0000000005120000-0x00000000051BC000-memory.dmp
    Filesize

    624KB

    Download
  • memory/752-134-0x00000000051D0000-0x0000000005236000-memory.dmp
    Filesize

    408KB

    Download
  • memory/752-135-0x00000000051D0000-0x0000000005774000-memory.dmp
    Filesize

    5.6MB

    Download