Overview

overview

1

Static

static

ccfaece56e...52.exe

windows7-x64

1

ccfaece56e...52.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 21:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    ccfaece56ed219a6f86f3448dec6108076e9e435b253838044d481423a87d052.exe

  • Size

    112KB

  • MD5

    a122e68495055711cb34912e7bad8442

  • SHA1

    19c637031ad145c89a1ba648e3ef2907d96ddba4

  • SHA256

    ccfaece56ed219a6f86f3448dec6108076e9e435b253838044d481423a87d052

  • SHA512

    2535adb8b9c5ecf48ca5652ed5fa63b49877deebb2c96e78a177ca5e14ce18e301f6fc93d3a7b6b9325f8125c957c368aa86bcaf91c3e2ff03f501367e18f6c8

  • SSDEEP

    1536:U8WvqTEPWMYz7g5saXMe8qMLdmCFGtF280NPIe5iq1ngA4mqsKxomtu4:U8WiTEuR7GsqMLgT1G5iq1fLqhoWu4

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ccfaece56ed219a6f86f3448dec6108076e9e435b253838044d481423a87d052.exe
    "C:\Users\Admin\AppData\Local\Temp\ccfaece56ed219a6f86f3448dec6108076e9e435b253838044d481423a87d052.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4976

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4976-132-0x0000000001000000-0x000000000101F000-memory.dmp

          Filesize

          124KB

          Download

        • memory/4976-133-0x0000000000550000-0x000000000055F000-memory.dmp

          Filesize

          60KB

          Download