Analysis

  • max time kernel
    91s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 15:27 UTC

General

  • Target

    9d0dd706a6c7577434d4707f8e1159452a29f332fc3c7aaf355b5874ec19afc9.exe

  • Size

    72KB

  • MD5

    6d00e7e5be31823e14528f00a403c8e0

  • SHA1

    f57d4a9b8bd14996bc1467dc1ee431e41d2cb506

  • SHA256

    9d0dd706a6c7577434d4707f8e1159452a29f332fc3c7aaf355b5874ec19afc9

  • SHA512

    c4e0ed6d0702ed9a293faf9ad3a025dafb41c34f65984d5f01b0ed8e73dbe9f90dbf6db9e7ade24e6dc3b3c953fd71737d3c613de381f41c8966688ccb41e061

  • SSDEEP

    1536:Rz6yRSbKHYeJSWxjWpohplgmEoeMwHHf3zvlS:R0KHYeJSWxj62ngmabH/D9S

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9d0dd706a6c7577434d4707f8e1159452a29f332fc3c7aaf355b5874ec19afc9.exe
    "C:\Users\Admin\AppData\Local\Temp\9d0dd706a6c7577434d4707f8e1159452a29f332fc3c7aaf355b5874ec19afc9.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4692

Network

    No results found
  • 20.189.173.5:443
    322 B
    7
  • 8.253.208.120:80
    322 B
    7
  • 8.253.208.120:80
    322 B
    7
  • 8.253.208.120:80
    322 B
    7
  • 8.253.208.120:80
    46 B
    40 B
    1
    1
  • 8.253.208.120:80
    46 B
    40 B
    1
    1
No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4692-132-0x0000000074F90000-0x0000000075541000-memory.dmp

    Filesize

    5.7MB

  • memory/4692-133-0x0000000074F90000-0x0000000075541000-memory.dmp

    Filesize

    5.7MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.