Resubmissions

23-09-2022 03:44

220923-eaf52sghgp 8

21-09-2022 16:46

220921-t92y5agga2 8

Analysis

  • max time kernel
    11s
  • max time network
    14s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-09-2022 03:44

General

  • Target

    Chew7.exe

  • Size

    1.6MB

  • MD5

    7e91139648b5a14b483486c053d5f4d0

  • SHA1

    78ec7fcb573d3ebb9b5110f9319380cc4b510b12

  • SHA256

    f747a7679964d088e75fa60241238669104107280feacf29cd0041f1f82e16b7

  • SHA512

    50f9e0346c2dbb5c4f945cd1e88ca3bace3439e54c378ffd475dbc692617d535fa3bed8c2b52436303cb46ca3db49173849fbfadb1a693aea0a87b523de3948d

  • SSDEEP

    49152:jA3alq/Auj1YD/tmtPIr1PrYD/tmtPIr1Pu:jaY0tgrVY0tgr

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Chew7.exe
    "C:\Users\Admin\AppData\Local\Temp\Chew7.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4288-132-0x00007FFE92940000-0x00007FFE93376000-memory.dmp
    Filesize

    10.2MB