Analysis

  • max time kernel
    8s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    22-10-2022 06:02

General

  • Target

    aca73acf92d5c709d17919f0d61f0db64bd50098fe2afe9e5834394dbaa611ae.exe

  • Size

    428KB

  • MD5

    85b8d2fa326926f049d7d3b7a083e08e

  • SHA1

    9884d2f5bce7405627495470893765a70f858242

  • SHA256

    aca73acf92d5c709d17919f0d61f0db64bd50098fe2afe9e5834394dbaa611ae

  • SHA512

    89d5b627a708974439e31079d122395c7e9ee06b345e2efa81e38a2821ceded0a1e95f919dcf44dce1dc509eeabae77264b8fadbe151408f63408c8b199090d7

  • SSDEEP

    6144:1Tz+ZXamW2jpJuSTZBDdDgPME1m4SKlwIMvfAoXbftChXW3AxfulDGgB:Nz+YmJJuGZYbzz2IgfFblCJxfS6

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aca73acf92d5c709d17919f0d61f0db64bd50098fe2afe9e5834394dbaa611ae.exe
    "C:\Users\Admin\AppData\Local\Temp\aca73acf92d5c709d17919f0d61f0db64bd50098fe2afe9e5834394dbaa611ae.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1768-54-0x0000000076961000-0x0000000076963000-memory.dmp

    Filesize

    8KB

  • memory/1768-55-0x0000000000400000-0x00000000004AF000-memory.dmp

    Filesize

    700KB

  • memory/1768-59-0x0000000001F60000-0x0000000001FE5000-memory.dmp

    Filesize

    532KB