4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd

Analysis

max time kernel
148s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 08:14 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
Size

851KB
MD5

27615d35bd341b91514b23dda1f9d0c2
SHA1

b84d9adaa40174a8576d5db945ca51bc9b461836
SHA256

4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd
SHA512

7b8bd1d222d2e42839bf27dd6f5cb68f11406659e2a53dfeb6f2c6edb2826f8e8667aa3e368bfde27745eb685b4c3bab990a06059947c982d674b71bc2bace0d
SSDEEP

24576:fP2th8MXzjPyYM80USmj6AmOEOjOEOJOcOLOFO+OOOGOeOwOKOlOezOLOfOXO8Oo:feBKYrBSmuAmOEOjOEOJOcOLOFO+OOO2

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
1980	4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe

C:\Users\Admin\AppData\Local\Temp\4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
"C:\Users\Admin\AppData\Local\Temp\4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1980-54-0x0000000076031000-0x0000000076033000-memory.dmp

Filesize
8KB

Download
memory/1980-55-0x0000000000400000-0x00000000004E1000-memory.dmp

Filesize
900KB

Download
memory/1980-56-0x0000000000400000-0x00000000004E1000-memory.dmp

Filesize
900KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.