Analysis

  • max time kernel
    90s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 20:36

General

  • Target

    f7da804c5a9ffd9cf714e5372d033592bc3628f5cb90964c93c65d131a4320ab.exe

  • Size

    160KB

  • MD5

    a0af0d539316e7eadbed8fd66d4d64b0

  • SHA1

    e512a722456d115151f1ac831ffabd6f34bcccb0

  • SHA256

    f7da804c5a9ffd9cf714e5372d033592bc3628f5cb90964c93c65d131a4320ab

  • SHA512

    707588d0934fa223d0264b5a88c053778b9766ab7977f565afd1f66dbc3210462e932d5da5cc49d669fd37b0b972e13514f43fa3130e6e43148f58b3a0f81213

  • SSDEEP

    3072:Uox46Vdp9V4LZZAyARl0DJyIu4liPcai+imtq5HT:Uom6vpr4LZZlA70G4cRi+FtmH

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f7da804c5a9ffd9cf714e5372d033592bc3628f5cb90964c93c65d131a4320ab.exe
    "C:\Users\Admin\AppData\Local\Temp\f7da804c5a9ffd9cf714e5372d033592bc3628f5cb90964c93c65d131a4320ab.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4948-132-0x0000000001000000-0x0000000001028000-memory.dmp

    Filesize

    160KB

  • memory/4948-133-0x0000000001000000-0x0000000001028000-memory.dmp

    Filesize

    160KB