Resubmissions

16/10/2022, 11:23

221016-nhg7rahec5 1

16/10/2022, 10:59

221016-m3hhkshcbl 1

Analysis

  • max time kernel
    42s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2022, 11:23

General

  • Target

    992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319.exe

  • Size

    3.7MB

  • MD5

    d1e1314df994a83001db3650d969b629

  • SHA1

    ec259d83c2f749af81d6fc4387e2e2667c4b46df

  • SHA256

    992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319

  • SHA512

    44c86ed830802183a9d771ad337df0355f2973055a523d073207a61495a78aad99c96c62bd5f812adb533aaa418d11fbc595add6725590b39bd0179190b66fe2

  • SSDEEP

    98304:KxUZHT0uACg5lEW4jZC23bVD7hXQdx+0JaJVTR:KxKQukj4jZC2xlXYx+0Jq

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319.exe
    "C:\Users\Admin\AppData\Local\Temp\992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1196-54-0x0000000000B30000-0x0000000000EE8000-memory.dmp

    Filesize

    3.7MB

  • memory/1196-55-0x000000001C5A0000-0x000000001C8DE000-memory.dmp

    Filesize

    3.2MB

  • memory/1196-56-0x000007FEFC161000-0x000007FEFC163000-memory.dmp

    Filesize

    8KB

  • memory/1196-57-0x0000000000A70000-0x0000000000AF0000-memory.dmp

    Filesize

    512KB

  • memory/1196-58-0x0000000020D90000-0x00000000210C2000-memory.dmp

    Filesize

    3.2MB

  • memory/1196-59-0x0000000000A70000-0x0000000000AF0000-memory.dmp

    Filesize

    512KB

  • memory/1196-60-0x00000000210C0000-0x0000000021326000-memory.dmp

    Filesize

    2.4MB