Overview

overview

1

Static

static

SOLICITUD ...D5.exe

windows7_x64

1

SOLICITUD ...D5.exe

windows10-2004_x64

1

Resubmissions

27-06-2022 14:10

220627-rg151sbggr 10

27-06-2022 14:08

220627-rfr6qabggl 1

Analysis

  • max time kernel
    40s
  • max time network
    43s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    27-06-2022 14:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SOLICITUD DE COTIZACION_20D5.exe

  • Size

    1.8MB

  • MD5

    732717fb963205cdf2d23f4a177fcfcb

  • SHA1

    f7bf9ce224c48c33208f896b1bc7b8b90f3accd1

  • SHA256

    051495d208bad010334f14c162600b66c7ef437ae3f6bd037e39bbfc4ccdb415

  • SHA512

    3761cbb98c804fd7194896249eb3545281dbc410f7a3e129be9dc5f29d2dd9f6bb730449c373b6179f363cbac45b40e500cb989762a31380b8fce57b5942cd6f

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SOLICITUD DE COTIZACION_20D5.exe
    "C:\Users\Admin\AppData\Local\Temp\SOLICITUD DE COTIZACION_20D5.exe"
    1⤵
      PID:1172
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x524
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1256

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1172-54-0x0000000076191000-0x0000000076193000-memory.dmp
      Filesize

      8KB

      Download