7163a32593b5045deb3bdce59153aa423a4fb8a7b155d233040945455e9c23fc | Triage™

Analysis

max time kernel
151s
max time network
153s
platform
windows7_x64
resource
win7-20220414-en
resource tags

arch:x64arch:x86image:win7-20220414-enlocale:en-usos:windows7-x64system
submitted
15/07/2022, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
order request on product_Doc.exe
Size 372KB
Sample220715-prrm8abfdm
SHA256 7163a32593b5045deb3bdce59153aa423a4fb8a7b155d233040945455e9c23fc
MD5 773b986fb709f7c795304c3faf82b056
SHA1 99f65cefcad32d71013717084449fde044577197
SHA512 3b2f649245368b7c51dfa496b95c068f8afa8c2a9c49fd917f3a3a07c698691c1b68df15477fcbf6f54f9ad0dcc57bb13be8deee84d45307712082fc108d145e
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1376	order request on product_Doc.exe

C:\Users\Admin\AppData\Local\Temp\order request on product_Doc.exe
"C:\Users\Admin\AppData\Local\Temp\order request on product_Doc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1376-54-0x0000000000DE0000-0x0000000000E42000-memory.dmp

Download

memory/1376-55-0x0000000075361000-0x0000000075363000-memory.dmp

Download