Overview

overview

1

Static

static

b915dd70b6...4e.exe

windows7-x64

1

b915dd70b6...4e.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    44s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    30/10/2022, 20:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b915dd70b6793fff155118ea13901bb863f1c144c8772238bf1623d62d61834e.exe

  • Size

    128KB

  • MD5

    9069f41e1037cfe4d0407275c2827d14

  • SHA1

    6397961a2430fe4b7c1c9d7c2bcfe245ae4d35aa

  • SHA256

    b915dd70b6793fff155118ea13901bb863f1c144c8772238bf1623d62d61834e

  • SHA512

    31ab844bc4bfa5a32b0dc4ae2ea4ca28f0bbecf4dc62dd809781df6333faefb30304944b499f3c4e5b53a318cd4efa158959de69ec6941fe3cd408016b77526c

  • SSDEEP

    3072:s2lmwbeSUcHu6XvIkw9/SUo4fvhgOpHAZrLZ3Fp:jbeSUb6Xgkwwovy8A9LZ3j

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b915dd70b6793fff155118ea13901bb863f1c144c8772238bf1623d62d61834e.exe
    "C:\Users\Admin\AppData\Local\Temp\b915dd70b6793fff155118ea13901bb863f1c144c8772238bf1623d62d61834e.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1348

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1348-54-0x0000000075601000-0x0000000075603000-memory.dmp

          Filesize

          8KB

          Download

        • memory/1348-55-0x0000000001400000-0x0000000003522000-memory.dmp

          Filesize

          33.1MB

          Download

        • memory/1348-56-0x0000000001400000-0x0000000003522000-memory.dmp

          Filesize

          33.1MB

          Download