Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2022, 19:44

General

  • Target

    9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe

  • Size

    1.3MB

  • MD5

    0d7f032c8e5e64db33c335263a7802f3

  • SHA1

    e0420fd6edf3a726fc8e229722588ffb20069cc2

  • SHA256

    9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474

  • SHA512

    f9c1399a5f919eeba7efca641a4ad671a5602088c7af1d10a4957880657349a46dc298d28d6ec2d6cc2108dbb54fdb7ab7210e47bc100680bf993c2be069404f

  • SSDEEP

    12288:s8eDyJYuX0zczdQz3cBCJv7x6QrQUKpzy55fYOvgUQPN0vlYYWVBMYiU8eDyJYuG:smX1IZJTxKMNPSmX1IZJTxKMNP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe
    "C:\Users\Admin\AppData\Local\Temp\9b4d35d205b01a123c0cb26e8e792257c43d8afe2064323e8b5550b0fcf05474.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1956-54-0x0000000075141000-0x0000000075143000-memory.dmp

          Filesize

          8KB

        • memory/1956-55-0x00000000742C0000-0x000000007486B000-memory.dmp

          Filesize

          5.7MB