Overview

overview

10

Static

static

Zoom_cm_fi...5_.exe

windows7_x64

1

Zoom_cm_fi...5_.exe

windows10-2004_x64

10

Resubmissions

22-04-2022 12:38

220422-pveg3agfej 10

Analysis

  • max time kernel
    80s
  • max time network
    61s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    22-04-2022 12:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Zoom_cm_fi7tkuks4vfZ9vvrZo4_mBWTynYhgjrAzQ2frNbzl9s8ADGADVkzJOzNW@US8jFszaZTZdG770_k0e3048527a5d38c5_.exe

  • Size

    127KB

  • MD5

    b66601f980729387a0b71c3203d58a16

  • SHA1

    0cbe635694844b844d0819585c4957ef86395f68

  • SHA256

    48abce626c6ac9b357677257b9aadfa987adb2c237d4ccdd9a8b98a60bae45c8

  • SHA512

    1a94e5b86dc71b4e26866a9c596bdeb3b95fe7f523349a5cdc407258bc50f33afe4939ef3474557c81006fe3a8425dd5693be52eb5bda538e095a113da2ebccb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fi7tkuks4vfZ9vvrZo4_mBWTynYhgjrAzQ2frNbzl9s8ADGADVkzJOzNW@US8jFszaZTZdG770_k0e3048527a5d38c5_.exe
    "C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fi7tkuks4vfZ9vvrZo4_mBWTynYhgjrAzQ2frNbzl9s8ADGADVkzJOzNW@US8jFszaZTZdG770_k0e3048527a5d38c5_.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1424
    • C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fi7tkuks4vfZ9vvrZo4_mBWTynYhgjrAzQ2frNbzl9s8ADGADVkzJOzNW@US8jFszaZTZdG770_k0e3048527a5d38c5_.exe
      "C:\Users\Admin\AppData\Local\Temp\Zoom_cm_fi7tkuks4vfZ9vvrZo4_mBWTynYhgjrAzQ2frNbzl9s8ADGADVkzJOzNW@US8jFszaZTZdG770_k0e3048527a5d38c5_.exe" /normal.priviledge
      2⤵
        PID:1228
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:1244
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x56c
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:544
      • C:\Windows\explorer.exe
        "C:\Windows\explorer.exe"
        1⤵
          PID:1944

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1244-56-0x000007FEFBFF1000-0x000007FEFBFF3000-memory.dmp
          Filesize

          8KB

          Download
        • memory/1424-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp
          Filesize

          8KB

          Download