Analysis

  • max time kernel
    148s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2022, 08:14 UTC

General

  • Target

    4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe

  • Size

    851KB

  • MD5

    27615d35bd341b91514b23dda1f9d0c2

  • SHA1

    b84d9adaa40174a8576d5db945ca51bc9b461836

  • SHA256

    4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd

  • SHA512

    7b8bd1d222d2e42839bf27dd6f5cb68f11406659e2a53dfeb6f2c6edb2826f8e8667aa3e368bfde27745eb685b4c3bab990a06059947c982d674b71bc2bace0d

  • SSDEEP

    24576:fP2th8MXzjPyYM80USmj6AmOEOjOEOJOcOLOFO+OOOGOeOwOKOlOezOLOfOXO8Oo:feBKYrBSmuAmOEOjOEOJOcOLOFO+OOO2

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe
    "C:\Users\Admin\AppData\Local\Temp\4272713a589c14cde95473ffed0a04a43236f281e96bc4233848c3aecda100bd.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1980-54-0x0000000076031000-0x0000000076033000-memory.dmp

    Filesize

    8KB

  • memory/1980-55-0x0000000000400000-0x00000000004E1000-memory.dmp

    Filesize

    900KB

  • memory/1980-56-0x0000000000400000-0x00000000004E1000-memory.dmp

    Filesize

    900KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.