Analysis
-
max time kernel
31s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
10-09-2022 14:42
General
-
Target
packages/AppInfo/Microsoft Analysis Services/AS OLEDB/110/SQLDumper.exe
-
Size
93KB
-
MD5
2ff41c1cdfb7f392ef9f600f083e0aca
-
SHA1
e5e55cee5bb93a0ab0d9034d973ae3af0ebca2a0
-
SHA256
b9a278cd7f3539f86fc65fb19a7ece72a3b3870f0e3f042cc1d6ab089196b8aa
-
SHA512
577ff4989edbaea5e43ae30d0dc84a936d2affee6f841ede8563f4003b2f2bec8da7d9c8d0a6c480183be47f09ab883c188246178f1f4363ac09a627b612b0ef
-
SSDEEP
1536:WwbWR/v1o/G42UR9whwRrcUTR9EhhBhV4IWzRVEpj4+gLS8Y9UxkLa2:AnD9UR9whwtvTRMBP3Bpj4+gLS8eUxkd
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\packages\AppInfo\Microsoft Analysis Services\AS OLEDB\110\SQLDumper.exe"C:\Users\Admin\AppData\Local\Temp\packages\AppInfo\Microsoft Analysis Services\AS OLEDB\110\SQLDumper.exe"1⤵
- Suspicious use of AdjustPrivilegeToken