Resubmissions

22-09-2022 17:00

220922-vh5flsbhh8 10

20-09-2022 10:36

220920-mm9bcscgd5 1

Analysis

  • max time kernel
    109s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22-09-2022 17:00

General

  • Target

    b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f.exe

  • Size

    28KB

  • MD5

    0e381331d637a5191abed6ff519d6911

  • SHA1

    de3a2be2ca6b0d32c3586012ce159a531d6e76da

  • SHA256

    b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f

  • SHA512

    8bbef0037038bc00e8c8f72b7252f2d3c3c27c5af9427f259d76efa09a2e95bd5677be6b72ad68cfcee0de00060f5e5f422af6304ba37bcbd64c072a6c9afb50

  • SSDEEP

    768:k/eV9xBkuoTr2JXkHIf4X65CHAou/uuXY0242NI:oeV9fk9Tr2JXqIgXh/u/uI1

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f.exe
    "C:\Users\Admin\AppData\Local\Temp\b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1504

Network

    No results found
  • 108.62.12.122:80
    b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f.exe
    152 B
    3
  • 108.62.12.122:80
    b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f.exe
    152 B
    3
  • 108.62.12.122:80
    b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f.exe
    152 B
    3
  • 108.62.12.122:80
    b495456a2239f3ba48e43ef295d6c00066473d6a7991051e1705a48746e8051f.exe
    152 B
    3
No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1504-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

    Filesize

    8KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.