Analysis

  • max time kernel
    172s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2022, 13:03

General

  • Target

    file.exe

  • Size

    355KB

  • MD5

    88c6b7d60c67550dc4ec922a392eae39

  • SHA1

    25567d572acb5bf738b2fffd28d8de57c7de2ae8

  • SHA256

    822bdba5086621869ce3206012d8ec55c301ed926d7b3a9b570120bea083ec28

  • SHA512

    f82e07be33c20e0f24469b703282ec38add8787ac15ad430dd2fb9c9250217e407230a0f2b8a96c7481eb1834b6ed663320cb464431733e24ab80c907de8de01

  • SSDEEP

    6144:PhBLEs9Al+bywTZmjuqGHSw2hpWMqK2IRsbh:Pfws9TBmCqXw2+Mq3b

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1660-132-0x0000000000727000-0x000000000075A000-memory.dmp

    Filesize

    204KB

  • memory/1660-133-0x0000000000A20000-0x0000000000A8E000-memory.dmp

    Filesize

    440KB

  • memory/1660-134-0x0000000000400000-0x00000000005B4000-memory.dmp

    Filesize

    1.7MB

  • memory/1660-135-0x0000000004EA0000-0x0000000005444000-memory.dmp

    Filesize

    5.6MB

  • memory/1660-136-0x0000000000727000-0x000000000075A000-memory.dmp

    Filesize

    204KB

  • memory/1660-137-0x0000000005450000-0x0000000005A68000-memory.dmp

    Filesize

    6.1MB

  • memory/1660-138-0x0000000004DD0000-0x0000000004DE2000-memory.dmp

    Filesize

    72KB

  • memory/1660-139-0x0000000005A70000-0x0000000005B7A000-memory.dmp

    Filesize

    1.0MB

  • memory/1660-140-0x0000000004DF0000-0x0000000004E2C000-memory.dmp

    Filesize

    240KB