3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507 | Triage

Analysis

max time kernel
133s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
24-05-2022 14:41

Sharing

Report Analysis Logs

General

Target

3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Size

43KB
MD5

7dd6dc0c5fcaa3fb65cf2d1e3314e2b0
SHA1

8007bf5fcfd128fa2a2a91ca50d4c2f45c99033e
SHA256

3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507
SHA512

3de33c1b989260bf7a71e15e22274f61cd66abf68c0b75b1fd7dbf0263bddd412998a1baed2cb3f36e097417fce75799efcaf1827966cacafd3141629a950294

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe

pid process

1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe

Suspicious use of AdjustPrivilegeToken 13 IoCs

Processes:

3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe

description	pid	process
Token: SeDebugPrivilege	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: 33	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: SeIncBasePriorityPrivilege	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: 33	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: SeIncBasePriorityPrivilege	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: 33	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: SeIncBasePriorityPrivilege	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: 33	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: SeIncBasePriorityPrivilege	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: 33	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: SeIncBasePriorityPrivilege	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: 33	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Token: SeIncBasePriorityPrivilege	1632	3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe

C:\Users\Admin\AppData\Local\Temp\3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
"C:\Users\Admin\AppData\Local\Temp\3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-54-0x0000000075361000-0x0000000075363000-memory.dmp

Filesize
8KB

Download
memory/1632-55-0x00000000744D0000-0x0000000074A7B000-memory.dmp

Filesize
5.7MB

Download