Analysis

  • max time kernel
    58s
  • max time network
    64s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    26-06-2022 06:00

General

  • Target

    s1.exe

  • Size

    12KB

  • MD5

    40fdf86711473f5ea0f0ba120234f9e2

  • SHA1

    d145487b6d5bd60727223a15ce8746d5f662d85a

  • SHA256

    0e84404718129d73719ea817d7726b2cf77cf7ff4e794db1b4063d642ac3caeb

  • SHA512

    e4deeff8c156de4c2fcb8b1ca7e35680050c498d5102316a76465777ba70f6c981de4470b8ca9e8d3a51a23ec2ff270c5564e4418fa9f1ec4fdac40cb9eb404f

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\s1.exe
    "C:\Users\Admin\AppData\Local\Temp\s1.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2008-54-0x00000000763E1000-0x00000000763E3000-memory.dmp

    Filesize

    8KB