023ffeb6a2cf7318bc93f4c944989dfaf0d583c1ed3140795fd0342410593d14 | Triage

Analysis

max time kernel
150s
max time network
153s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
22-07-2022 20:07

Sharing

Report Analysis Logs

General

Target

039cf4716062ee3afde9a567a84987af.exe
Size

84KB
MD5

039cf4716062ee3afde9a567a84987af
SHA1

f26b7ea6ef6a645988a13677c04d38d10a6f9420
SHA256

023ffeb6a2cf7318bc93f4c944989dfaf0d583c1ed3140795fd0342410593d14
SHA512

4acedfc5fe7fab5c440bc909f28c463e8b3948ce36eacf09bd9e00b3a1a28fd4a49be55052bdd80ac46b8d0d256863b97f5e4e9db8b84328de82a064bd4f182a

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

039cf4716062ee3afde9a567a84987af.exe

description pid process

Token: SeDebugPrivilege 640 039cf4716062ee3afde9a567a84987af.exe

C:\Users\Admin\AppData\Local\Temp\039cf4716062ee3afde9a567a84987af.exe
"C:\Users\Admin\AppData\Local\Temp\039cf4716062ee3afde9a567a84987af.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/640-54-0x00000000012E0000-0x00000000012FA000-memory.dmp

Filesize
104KB

Download
memory/640-55-0x0000000076921000-0x0000000076923000-memory.dmp

Filesize
8KB

Download