Analysis
- max time kernel
41s - max time network
48s - platform
windows7_x64 - resource
win7-20220414-en - submitted
08/05/2022, 23:20
General
- Target bizbbxixgdfafac.exe
- Size 394KB
- Sample220508-3bdnbadchl
- SHA256 d0e408f7fc13457efe5f110a7e14541e2b9dea9b273bc3c8b2d946f6ee30fbec
Score
5/10
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bizbbxixgdfafac.exe"C:\Users\Admin\AppData\Local\Temp\bizbbxixgdfafac.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\bizbbxixgdfafac.exeC:\Users\Admin\AppData\Local\Temp\bizbbxixgdfafac.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1372-54-0x0000000001230000-0x000000000129C000-memory.dmp
memory/1372-55-0x0000000000200000-0x0000000000206000-memory.dmp
memory/1372-56-0x0000000000410000-0x000000000047A000-memory.dmp
memory/1372-57-0x0000000000220000-0x0000000000226000-memory.dmp