Analysis

  • max time kernel
    36s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    25-08-2022 21:21

General

  • Target

    Delivery Report.exe

  • Size

    391KB

  • MD5

    6509067f5e377007e7bcf1546d15ba55

  • SHA1

    d437c89632e52269cfaf5a8a2a4cf64241041c4f

  • SHA256

    5a86beef7389e6fcd0c5910770bbf4aa92a353d3ccc0c5b80e9ec41f48c5af4a

  • SHA512

    88cecfcf73e024239b146b3b2b1700968a5a257c39322dc5e4f251d27647b4fcaefae2c9f08298704350b8ede83c616a3935550327ad42f45972b301c7ba927f

  • SSDEEP

    6144:/XiuJDZUEd5UT2AyvSlKkl8ftbFq65LhhZMEUcQQiW:ZDj9Nv0K5tbFq6xh8W

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Delivery Report.exe
    "C:\Users\Admin\AppData\Local\Temp\Delivery Report.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1032-54-0x00000000011F0000-0x0000000001258000-memory.dmp

    Filesize

    416KB

  • memory/1032-55-0x0000000075501000-0x0000000075503000-memory.dmp

    Filesize

    8KB

  • memory/1032-56-0x0000000001140000-0x000000000118C000-memory.dmp

    Filesize

    304KB

  • memory/1032-57-0x0000000001105000-0x0000000001116000-memory.dmp

    Filesize

    68KB

  • memory/1032-58-0x0000000001105000-0x0000000001116000-memory.dmp

    Filesize

    68KB