Analysis

  • max time kernel
    8s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-10-2022 11:08

General

  • Target

    959e00c0c76312f723b4a88fcf8862adfbcb9fa7e1a6cae713a0d5c2a54d68f9.exe

  • Size

    424KB

  • MD5

    f5e9a3d66d35d6c1c6f2b8c99614c8f0

  • SHA1

    fadaa7d740e8e0564e93ba5cfe7183bf8e145c3f

  • SHA256

    959e00c0c76312f723b4a88fcf8862adfbcb9fa7e1a6cae713a0d5c2a54d68f9

  • SHA512

    eab27f6961fa582bf5a188fe0746f27adf3b01655a72f5af514181db2c9669a732e76cbd400f05b5b59dd026f22f7a56c8198316fb4223bbf0b8eda5c2cdc731

  • SSDEEP

    12288:bmJqaEwQLysD/XDz3qzRdW1DzHpblCJxfS6:bgMLyWDbkElOR1

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\959e00c0c76312f723b4a88fcf8862adfbcb9fa7e1a6cae713a0d5c2a54d68f9.exe
    "C:\Users\Admin\AppData\Local\Temp\959e00c0c76312f723b4a88fcf8862adfbcb9fa7e1a6cae713a0d5c2a54d68f9.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/768-54-0x0000000076871000-0x0000000076873000-memory.dmp

    Filesize

    8KB

  • memory/768-55-0x0000000000400000-0x00000000004AD000-memory.dmp

    Filesize

    692KB

  • memory/768-59-0x00000000002D0000-0x0000000000355000-memory.dmp

    Filesize

    532KB