Resubmissions

16-10-2022 11:14

221016-ncgzsshea7 5

16-10-2022 10:56

221016-m1tg3ahch8 3

Analysis

  • max time kernel
    48s
  • max time network
    174s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    16-10-2022 10:56

General

  • Target

    794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3.exe

  • Size

    3.8MB

  • MD5

    0b9e4955640036d32148e1dd52b85cf0

  • SHA1

    2ae01aa674711ab20d0dc930dba49fceeed4e6c9

  • SHA256

    794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3

  • SHA512

    71d3d65ae511d0e49f76a9e0ab46c9338a67378444a76f1befae9fb1e9fdfd3ec4dbb13ec163cb64962b2ef51520b6394974aeda865bea28a4b43a2bb321b52b

  • SSDEEP

    98304:17XaDyFUzyGg6DlGfuDKXe5StV354CJm9A2H:EgYlN8kS3x+

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3.exe
    "C:\Users\Admin\AppData\Local\Temp\794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2356-120-0x0000022B31A10000-0x0000022B31DE2000-memory.dmp

    Filesize

    3.8MB

  • memory/2356-121-0x0000022B4C5F0000-0x0000022B4C944000-memory.dmp

    Filesize

    3.3MB