Analysis

  • max time kernel
    4294200s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20220310-en
  • submitted
    18-03-2022 14:29

General

  • Target

    SC51094.exe

  • Size

    15KB

  • MD5

    11a1903c8e55120bd87ffbbdd69ce5d5

  • SHA1

    fe317a22318883df21958d41b51542a8f073c064

  • SHA256

    4383e4fce4c6ea01fa19943595eff236f3c9a4470de9c790561db8592e0a92c0

  • SHA512

    2b479072ce490a086773a8aa8d6d6aa9c900e21e8c31245182bd699f5ed539c05ad6839f70e8235cd56a5686a8e1f16a3e007dc0b6db1103cd98b93e60437db6

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SC51094.exe
    "C:\Users\Admin\AppData\Local\Temp\SC51094.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1096-54-0x0000000074470000-0x0000000074B5E000-memory.dmp
    Filesize

    6.9MB

  • memory/1096-55-0x0000000000900000-0x000000000090A000-memory.dmp
    Filesize

    40KB

  • memory/1096-56-0x0000000004D70000-0x0000000004D71000-memory.dmp
    Filesize

    4KB