Analysis

  • max time kernel
    173s
  • max time network
    189s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-09-2022 05:13

General

  • Target

    SecuriteInfo.com.Win32.CrypterX-gen.16696.exe

  • Size

    379KB

  • MD5

    e0e634beec2b44a403baf6c2536a11cc

  • SHA1

    173932da271505866901f0971695f1a0bb796700

  • SHA256

    24fda0ee676f8a9aecaa87999be2fa280621f52524cb18cd7120255ad672fe42

  • SHA512

    7f56e09a30104c58e5cc15fa8efd26a93651bc681f3292db998f27258c731934fda292442c7fb5b8b0bf2e48559ec80741dea74cf533b9a413bcb1c4b42409d2

  • SSDEEP

    6144:ZsaYDfdE4vvvvvvvvvvvvvvvvvvvvvvvvBdH02iBL6A:nOVZdU2cL

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.16696.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.16696.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3840-132-0x0000000000920000-0x0000000000984000-memory.dmp

    Filesize

    400KB