Analysis

  • max time kernel
    188s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    09-06-2022 00:53

General

  • Target

    164864255d356996cd8111dd74b5b2733fa578a60081a433eb6ff8ee70315281.exe

  • Size

    47KB

  • MD5

    362c6b97511c613742d31ef8274f27c3

  • SHA1

    4cd2e549e5c68052e0daa90093c3a032c82460bb

  • SHA256

    164864255d356996cd8111dd74b5b2733fa578a60081a433eb6ff8ee70315281

  • SHA512

    2c1765e903b44047eb9a5d85e198d1fca8a9675f3b3aa2c598b69ba6b88e461db9ab7674f6db970f0b60f15c83ce0f2d1dfcc8935481c082091912914c3fd1c7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\164864255d356996cd8111dd74b5b2733fa578a60081a433eb6ff8ee70315281.exe
    "C:\Users\Admin\AppData\Local\Temp\164864255d356996cd8111dd74b5b2733fa578a60081a433eb6ff8ee70315281.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/796-54-0x00000000765F1000-0x00000000765F3000-memory.dmp

    Filesize

    8KB

  • memory/796-55-0x0000000000900000-0x0000000000914000-memory.dmp

    Filesize

    80KB

  • memory/796-56-0x0000000002395000-0x00000000023A6000-memory.dmp

    Filesize

    68KB