43970e64f251040e9284a4cec968b01cce4a3cd23be67a1f21dd14e54f7a9bf1

Submit
Reports

Overview

overview

Static

static

Adobe-Phot...op.exe

windows7_x64

Adobe-Phot...op.exe

windows10-2004_x64

Adobe-Phot...ft.exe

windows7_x64

Adobe-Phot...ft.exe

windows10-2004_x64

Adobe-Phot...er.exe

windows7_x64

Adobe-Phot...er.exe

windows10-2004_x64

Adobe-Phot...er.exe

windows7_x64

Adobe-Phot...er.exe

windows10-2004_x64

Adobe-Phot...10.dll

windows7_x64

Adobe-Phot...10.dll

windows10-2004_x64

Adobe-Phot...??.dll

windows7_x64

Adobe-Phot...??.dll

windows10-2004_x64

Adobe-Phot...rv.dll

windows7_x64

Adobe-Phot...rv.dll

windows10-2004_x64

Adobe-Phot...er.dll

windows7_x64

Adobe-Phot...er.dll

windows10-2004_x64

Adobe-Phot...re.dll

windows7_x64

Adobe-Phot...re.dll

windows10-2004_x64

Adobe-Phot...PS.dll

windows7_x64

Adobe-Phot...PS.dll

windows10-2004_x64

Adobe-Phot...te.url

windows7_x64

Adobe-Phot...te.url

windows10-2004_x64

Adobe-Phot...al.pdf

windows7_x64

Adobe-Phot...al.pdf

windows10-2004_x64

Adobe-Phot...el.exe

windows7_x64

Adobe-Phot...el.exe

windows10-2004_x64

Adobe-Phot...64.exe

windows7_x64

Adobe-Phot...64.exe

windows10-2004_x64

Adobe-Phot...ll.dll

windows7_x64

Adobe-Phot...ll.dll

windows10-2004_x64

Adobe-Phot...64.dll

windows7_x64

Adobe-Phot...64.dll

windows10-2004_x64

Analysis

max time kernel
51s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-04-2022 22:06

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

Behavioral task

behavioral1

Sample

Adobe-Photoshop-CC-2022-1.4-main/Adobe Photoshop.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Adobe-Photoshop-CC-2022-1.4-main/Adobe Photoshop.exe

Resource

win10v2004-20220414-en

vidar 1199 spyware stealer

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral3

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/Resources/products/packages/Program Files (x86)/Microsoft.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral4

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/Resources/products/packages/Program Files (x86)/Microsoft.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral5

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Launcher/Microsoft Analysis Services/AS OLEDB/110/SQLDumper.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral6

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Launcher/Microsoft Analysis Services/AS OLEDB/110/SQLDumper.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral7

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/SQLDumper.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral8

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/SQLDumper.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral9

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/msolui110.dll

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral10

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/msolui110.dll

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral11

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/xmsrv ? ?????.dll

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral12

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/xmsrv ? ?????.dll

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral13

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/xmsrv.dll

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral14

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/xmsrv.dll

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral15

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/CompatProvider.dll

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral16

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/CompatProvider.dll

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral17

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/DismCore.dll

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral18

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/DismCore.dll

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral19

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/DismCorePS.dll

Resource

win7-20220414-en

persistence

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral20

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/DismCorePS.dll

Resource

win10v2004-20220414-en

persistence

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral21

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/ASIO4ALL Web Site.url

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral22

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/ASIO4ALL Web Site.url

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral23

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/ASIO4ALL v2 Instruction Manual.pdf

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral24

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/ASIO4ALL v2 Instruction Manual.pdf

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral25

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/a4apanel.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral26

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/a4apanel.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral27

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/a4apanel64.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral28

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/a4apanel64.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral29

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/asio4all.dll

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral30

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/asio4all.dll

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral31

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/asio4all64.dll

Resource

win7-20220414-en

persistence

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral32

Sample

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/Program Files (x86)/ASIO4ALL v2/asio4all64.dll

Resource

win10v2004-20220414-en

persistence

windows10-2004_x64

0 signatures

0 seconds

Report Analysis Logs

General

Target

Adobe-Photoshop-CC-2022-1.4-main/packages/packages/AppInfo/Launcher/Microsoft Analysis Services/AS OLEDB/110/SQLDumper.exe
Size

93KB
MD5

2ff41c1cdfb7f392ef9f600f083e0aca
SHA1

e5e55cee5bb93a0ab0d9034d973ae3af0ebca2a0
SHA256

b9a278cd7f3539f86fc65fb19a7ece72a3b3870f0e3f042cc1d6ab089196b8aa
SHA512

577ff4989edbaea5e43ae30d0dc84a936d2affee6f841ede8563f4003b2f2bec8da7d9c8d0a6c480183be47f09ab883c188246178f1f4363ac09a627b612b0ef

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

SQLDumper.exe

description pid process

Token: SeDebugPrivilege 1616 SQLDumper.exe

description	pid	process
Token: SeDebugPrivilege	1616	SQLDumper.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Adobe-Photoshop-CC-2022-1.4-main\packages\packages\AppInfo\Launcher\Microsoft Analysis Services\AS OLEDB\110\SQLDumper.exe
"C:\Users\Admin\AppData\Local\Temp\Adobe-Photoshop-CC-2022-1.4-main\packages\packages\AppInfo\Launcher\Microsoft Analysis Services\AS OLEDB\110\SQLDumper.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1616

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads