676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2

Analysis

max time kernel
34s
max time network
39s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 17:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe
Size

192KB
MD5

821277f6201927dfb66693dd848694a0
SHA1

e0e63cabfa51337a13705303365710f64bae9f5e
SHA256

676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2
SHA512

9ec9b1478673cabf9b45b3ccbbee22d6f146a0636aab9baace5fabca2d6be8bff730ead6d1e85de49ef69917d26d32f9553c3b6469d051424f51c2a1943f82c3
SSDEEP

3072:JRAEC2Oi8NXC797F8TBfFvj4bq57mp4HIWtW9yQRsl:J1C2F8NXC796TB9vj48BtWgQR8

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	836	676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 836 wrote to memory of 560	836	676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe	27
PID 836 wrote to memory of 560	836	676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe	27
PID 836 wrote to memory of 560	836	676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe	27
PID 836 wrote to memory of 560	836	676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe	27

C:\Users\Admin\AppData\Local\Temp\676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe
"C:\Users\Admin\AppData\Local\Temp\676f9d7e50061eb6da17a25aeca4cac21b0ad0d5f536296f27844dc42ff5d8c2.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:836
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 520
  2⤵
  PID:560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/836-54-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-57-0x0000000075AD1000-0x0000000075AD3000-memory.dmp

Filesize
8KB

Download
memory/836-58-0x0000000074B30000-0x00000000750DB000-memory.dmp

Filesize
5.7MB

Download
memory/836-59-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-60-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-61-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-62-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-64-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-63-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-65-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-68-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-69-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-67-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-66-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-72-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-73-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-71-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-70-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-76-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-77-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-75-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-74-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-80-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-81-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-79-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-78-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-84-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-85-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-83-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-82-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-88-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-89-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-87-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-86-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-92-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-93-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-91-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-90-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-96-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-97-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-95-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-94-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-100-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-101-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-99-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-98-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-104-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-105-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-103-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-102-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-108-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-109-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-107-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-106-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-112-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-113-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-111-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-110-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-116-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-117-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-115-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-114-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-118-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/836-126-0x0000000074B30000-0x00000000750DB000-memory.dmp

Filesize
5.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads