Analysis

  • max time kernel
    11s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-10-2022 07:48

General

  • Target

    885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exe

  • Size

    424KB

  • MD5

    823ece0c42f0a1527a81efe1cff9591a

  • SHA1

    dc0fc3de6b66447a632d1055fe58d59e2f3c0099

  • SHA256

    885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906

  • SHA512

    c651c4641f9edc780b9eee94342eeafb0d074cbe3a196660c9c55e7ba54c653dfe6e9112e329ff6d1361cd43939725ae5d0b708042d28e51c1c99151af45a360

  • SSDEEP

    6144:BJOrslDNrfqw5W9RtPLal1tBzAF2Rg/zUZjpMWMl4ZC824UzHoXbftChXW3AxfuJ:BJOrSNr4S77zAJzUZ1azKblCJxfS6

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exe
    "C:\Users\Admin\AppData\Local\Temp\885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1520-54-0x0000000074D61000-0x0000000074D63000-memory.dmp

    Filesize

    8KB

  • memory/1520-55-0x0000000000400000-0x00000000004AD000-memory.dmp

    Filesize

    692KB

  • memory/1520-59-0x0000000001EA0000-0x0000000001F25000-memory.dmp

    Filesize

    532KB