cd5f1820af33d2e6f034ca088a5fd83592835c722aca63d9f4912ea2e7996d00 | Triage™

Analysis

max time kernel
132s
max time network
145s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
18/08/2022, 09:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SecuriteInfo.com.W32.AIDetectNet.01.11160.exe
Size 21KB
Sample220818-lnrl9scfaq
SHA256 cd5f1820af33d2e6f034ca088a5fd83592835c722aca63d9f4912ea2e7996d00
MD5 cfec3531b1a8b3a2286da188787ffe01
SHA1 41f00acfcd2a25fbef6bf42520bb21f9cf94ffb5
SHA512 9ab80365f117be8d170c3ba1a6f9b1450489a21117bd6b89b2c3dbe2e30b55e9b3dce4ac069988af52ee6c2e4afec477f013569d595ab40c9865dc3acb28b30a
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1764	SecuriteInfo.com.W32.AIDetectNet.01.11160.exe

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetectNet.01.11160.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetectNet.01.11160.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1764-54-0x0000000000890000-0x000000000089A000-memory.dmp

Download

memory/1764-55-0x0000000075BA1000-0x0000000075BA3000-memory.dmp

Download