Overview

overview

10

Static

static

SCAN_COP.scr

windows7-x64

10

SCAN_COP.scr

windows10-2004-x64

1

Analysis

  • max time kernel
    96s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2022 18:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SCAN_COP.scr

  • Size

    1.0MB

  • MD5

    c5da839b1c6505b50f9d18588bc29dcc

  • SHA1

    808bcb8114f6188448b06ef581965e6ee09d4562

  • SHA256

    af51aadc7d93eea0355ed2605959052333a0e124753ff5df78d16bcbf5031fbe

  • SHA512

    03cc401161ae408e0b585aee60db9caec298a9f69cd5b1323417dc49771cceb7df3711886542ca7add6ff62091c83b0ae127c26ea2f4112ca6f84edff4e7952d

  • SSDEEP

    12288:7SDJuxq0TA5FCxv2eP0Kla6EMAXmnSBY5eUk4MVYolDfyWEYjms8hV:7S9RK4i0p9r2iYDcmy3qs8hV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 15 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SCAN_COP.scr
    "C:\Users\Admin\AppData\Local\Temp\SCAN_COP.scr" /S
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/812-132-0x00000000005B0000-0x00000000006B6000-memory.dmp
    Filesize

    1.0MB

    Download
  • memory/812-133-0x0000000005660000-0x0000000005C04000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/812-134-0x00000000050B0000-0x0000000005142000-memory.dmp
    Filesize

    584KB

    Download
  • memory/812-135-0x0000000005070000-0x000000000507A000-memory.dmp
    Filesize

    40KB

    Download
  • memory/812-136-0x0000000008A90000-0x0000000008B2C000-memory.dmp
    Filesize

    624KB

    Download