Analysis

  • max time kernel
    8s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-10-2022 07:26

General

  • Target

    86aff38ebaa36a7c2431b984563e91e1e130b0112109ce303181ec17430b4faf.exe

  • Size

    424KB

  • MD5

    da5c45ce7fb2f24337fd1f559453bc69

  • SHA1

    d93e1a60ea5912be8190b0951cb63f731bd3361c

  • SHA256

    86aff38ebaa36a7c2431b984563e91e1e130b0112109ce303181ec17430b4faf

  • SHA512

    86ed786f132f4f8bc0c7ffc55d15f34d25786eec204df6ed7c82224e45dc4744d27ab7048ee41609e920a8833add5e3498ffa7fcc8787875d94f2f4022593c92

  • SSDEEP

    6144:b2QDnUrp63iAY4zSDQzxIvT2ok+IQGH02JCIoXbftChXW3AxfulDGgB:bdDUrp61uW0TlLIQGUbNblCJxfS6

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\86aff38ebaa36a7c2431b984563e91e1e130b0112109ce303181ec17430b4faf.exe
    "C:\Users\Admin\AppData\Local\Temp\86aff38ebaa36a7c2431b984563e91e1e130b0112109ce303181ec17430b4faf.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1996-54-0x0000000075281000-0x0000000075283000-memory.dmp

    Filesize

    8KB

  • memory/1996-55-0x0000000000400000-0x00000000004AD000-memory.dmp

    Filesize

    692KB

  • memory/1996-59-0x00000000004B0000-0x0000000000535000-memory.dmp

    Filesize

    532KB