Overview

overview

10

Static

static

a4b4256847...97.exe

windows7-x64

1

a4b4256847...97.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    46s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    03-10-2022 13:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a4b42568472f4760b7546fddbb45dbf34f0a0c3de9ee55c80e1740b37249ea97.exe

  • Size

    340KB

  • MD5

    6dae87fc0043e2ed7af7d567c3f43320

  • SHA1

    938e5fb9394b32f8769affab118587a513ba4eae

  • SHA256

    a4b42568472f4760b7546fddbb45dbf34f0a0c3de9ee55c80e1740b37249ea97

  • SHA512

    4c8c327ef01d072a3c8b77cbc66d11bd6e0f8b1e8548be8bd6eb25981232caa0fdaf3994674dde6b4727880216f1a1562eb5eb012a8257bf087d377531353b33

  • SSDEEP

    6144:yR6CiG8KotTmhJ4KK2LNbbAS1B6Hr1fwdCsGlS17ZCu3+z:yR6Cr8KoK3V8S+HGt1VCW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4b42568472f4760b7546fddbb45dbf34f0a0c3de9ee55c80e1740b37249ea97.exe
    "C:\Users\Admin\AppData\Local\Temp\a4b42568472f4760b7546fddbb45dbf34f0a0c3de9ee55c80e1740b37249ea97.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1416-54-0x0000000074DC1000-0x0000000074DC3000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1416-55-0x00000000742C0000-0x000000007486B000-memory.dmp
    Filesize

    5.7MB

    Download