Resubmissions

16-10-2022 11:14

221016-ncgzsshea7 5

16-10-2022 10:56

221016-m1tg3ahch8 3

Analysis

  • max time kernel
    50s
  • max time network
    78s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    16-10-2022 11:14

General

  • Target

    794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3.exe

  • Size

    3.8MB

  • MD5

    0b9e4955640036d32148e1dd52b85cf0

  • SHA1

    2ae01aa674711ab20d0dc930dba49fceeed4e6c9

  • SHA256

    794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3

  • SHA512

    71d3d65ae511d0e49f76a9e0ab46c9338a67378444a76f1befae9fb1e9fdfd3ec4dbb13ec163cb64962b2ef51520b6394974aeda865bea28a4b43a2bb321b52b

  • SSDEEP

    98304:17XaDyFUzyGg6DlGfuDKXe5StV354CJm9A2H:EgYlN8kS3x+

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3.exe
    "C:\Users\Admin\AppData\Local\Temp\794bb4b18eafd40fc2ef38848b96dc23c7ad682379c8c9acd1c53dc86edb2ae3.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1004-54-0x0000000000D30000-0x0000000001102000-memory.dmp

    Filesize

    3.8MB

  • memory/1004-55-0x000000001C290000-0x000000001C5E4000-memory.dmp

    Filesize

    3.3MB

  • memory/1004-56-0x0000000002666000-0x0000000002685000-memory.dmp

    Filesize

    124KB