Analysis
-
max time kernel
42s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
12-08-2022 15:42
Static task
static1
Behavioral task
behavioral1
Sample
Order #165-3520P-WTMM10X.exe
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
General
-
Target
Order #165-3520P-WTMM10X.exe
-
Size
261KB
-
MD5
2bf6d8556ca6620a7f3802521da5c138
-
SHA1
68ad243311f33ed4cfb4b3d75c9e3f0a271be58f
-
SHA256
39b9b9d2c699f8523e55a05bfc74f6f5764fabb0a1418f1cec4bc78609c1b37b
-
SHA512
9c8e092b7f786d3a768794da9ad28c257f8b78008ffa598c76f8e6ecfcc4a6af06b60a50f3faafcbf39833e0f9d5ac96d5301bc1a7ad1f9633a0378452281dcd
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Order #165-3520P-WTMM10X.exedescription pid process Token: SeDebugPrivilege 1140 Order #165-3520P-WTMM10X.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1140-54-0x0000000000850000-0x0000000000898000-memory.dmpFilesize
288KB
-
memory/1140-55-0x0000000075F51000-0x0000000075F53000-memory.dmpFilesize
8KB
-
memory/1140-56-0x0000000004B35000-0x0000000004B46000-memory.dmpFilesize
68KB
-
memory/1140-57-0x0000000000710000-0x000000000073E000-memory.dmpFilesize
184KB
-
memory/1140-58-0x0000000004B35000-0x0000000004B46000-memory.dmpFilesize
68KB