Overview

overview

10

Static

static

210e940c47...1e.exe

windows7_x64

5

210e940c47...1e.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    83s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    12-06-2022 09:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    210e940c47cf79db8a3b9bceff1e4caae76653aeaf97080883ff735fd354221e.exe

  • Size

    550KB

  • MD5

    03598ac96100cf4cb41e01e3f4f43ef1

  • SHA1

    5bbe4890beb41e5aa137e3ebb8277b6318e1b524

  • SHA256

    210e940c47cf79db8a3b9bceff1e4caae76653aeaf97080883ff735fd354221e

  • SHA512

    90dfb3fced9be8e29fa750b9085b2b3b07abcf2433e95044adbefea01d373f3ad0a899f781fd61c426a8f22ac09a4757b5523ce72176ea47e767e88d64223d7d

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\210e940c47cf79db8a3b9bceff1e4caae76653aeaf97080883ff735fd354221e.exe
    "C:\Users\Admin\AppData\Local\Temp\210e940c47cf79db8a3b9bceff1e4caae76653aeaf97080883ff735fd354221e.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:908
    • C:\Users\Admin\AppData\Local\Temp\210e940c47cf79db8a3b9bceff1e4caae76653aeaf97080883ff735fd354221e.exe
      "C:\Users\Admin\AppData\Local\Temp\210e940c47cf79db8a3b9bceff1e4caae76653aeaf97080883ff735fd354221e.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:936
      • C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
        dw20.exe -x -s 776
        3⤵
          PID:1352

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/908-54-0x00000000759F1000-0x00000000759F3000-memory.dmp

      Filesize

      8KB

      Download

    • memory/908-55-0x0000000074780000-0x0000000074D2B000-memory.dmp

      Filesize

      5.7MB

      Download

    • memory/908-60-0x0000000074780000-0x0000000074D2B000-memory.dmp

      Filesize

      5.7MB

      Download

    • memory/936-56-0x0000000000400000-0x0000000000478000-memory.dmp

      Filesize

      480KB

      Download

    • memory/936-58-0x0000000000400000-0x0000000000478000-memory.dmp

      Filesize

      480KB

      Download

    • memory/936-61-0x0000000000400000-0x0000000000478000-memory.dmp

      Filesize

      480KB

      Download

    • memory/936-63-0x0000000074710000-0x0000000074CBB000-memory.dmp

      Filesize

      5.7MB

      Download

    • memory/936-64-0x0000000074710000-0x0000000074CBB000-memory.dmp

      Filesize

      5.7MB

      Download