Overview
overview
10Static
static
416/0e055e...59.exe
windows7-x64
1416/0e055e...59.exe
windows10-2004-x64
1416/1192e5...71.exe
windows7-x64
5416/1192e5...71.exe
windows10-2004-x64
5416/442068...71.exe
windows7-x64
10416/442068...71.exe
windows10-2004-x64
10416/444471...1e.exe
windows7-x64
1416/444471...1e.exe
windows10-2004-x64
1416/57b3e3...ad.exe
windows7-x64
6416/57b3e3...ad.exe
windows10-2004-x64
6416/83111a...a8.exe
windows7-x64
1416/83111a...a8.exe
windows10-2004-x64
1416/9fb365...0d.exe
windows7-x64
3416/9fb365...0d.exe
windows10-2004-x64
3416/b0118d...94.exe
windows7-x64
1416/b0118d...94.exe
windows10-2004-x64
1416/c30afd...35.exe
windows7-x64
3416/c30afd...35.exe
windows10-2004-x64
3416/d7175f...6d.exe
windows7-x64
1416/d7175f...6d.exe
windows10-2004-x64
1416/e8b275...bb.exe
windows7-x64
3416/e8b275...bb.exe
windows10-2004-x64
3416/ed8b3b...0a.exe
windows7-x64
1416/ed8b3b...0a.exe
windows10-2004-x64
1Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
12-11-2022 03:33
Static task
static1
Behavioral task
behavioral1
Sample
416/0e055e38861331920a9f5caec8cb9c1fa5d693e4c710d9bca7ff09df42026359.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
416/0e055e38861331920a9f5caec8cb9c1fa5d693e4c710d9bca7ff09df42026359.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
416/1192e513c036fa5b640ccf1796790b03341fa50e6b20254e75f534d35e846a71.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
416/1192e513c036fa5b640ccf1796790b03341fa50e6b20254e75f534d35e846a71.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
416/442068674b35f29fc923668486ef6dd33964f878f421a8216b973eb6a869f571.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
416/442068674b35f29fc923668486ef6dd33964f878f421a8216b973eb6a869f571.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
416/444471a678be35837f0e4d1930a2187345a29b538a8b496cf071a810bfc85b1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
416/444471a678be35837f0e4d1930a2187345a29b538a8b496cf071a810bfc85b1e.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
416/57b3e371843add6e8c0c6c146deec48661318c5326514570e7bad0b948f196ad.exe
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
416/57b3e371843add6e8c0c6c146deec48661318c5326514570e7bad0b948f196ad.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
416/83111ab2f5139678b7db4a8ba74302e75442ac3367a78a4872cf0481b125cfa8.exe
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
416/83111ab2f5139678b7db4a8ba74302e75442ac3367a78a4872cf0481b125cfa8.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
416/9fb365eaecb9b0859c75c7ee4fc8d6affa9d1d5ded2bb2453fffd9723f3d260d.exe
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
416/9fb365eaecb9b0859c75c7ee4fc8d6affa9d1d5ded2bb2453fffd9723f3d260d.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
416/b0118d9d3be0bf1d5536dc98e1d2567dfbd60e5fde92b68591f8d595ea8fcd94.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
416/b0118d9d3be0bf1d5536dc98e1d2567dfbd60e5fde92b68591f8d595ea8fcd94.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
416/c30afd55859ca602b97e7708d0dbbf14f581256c352289ca88433bacd5da6335.exe
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
416/c30afd55859ca602b97e7708d0dbbf14f581256c352289ca88433bacd5da6335.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
416/d7175fc8f8d2c38619a6335a5f8c83de00108016aa80c8d34246be3d7afb8d6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
416/d7175fc8f8d2c38619a6335a5f8c83de00108016aa80c8d34246be3d7afb8d6d.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
416/e8b2756b2b62303253e51178f5a9f97657ee08cc0c879889b61dd960da4627bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
416/e8b2756b2b62303253e51178f5a9f97657ee08cc0c879889b61dd960da4627bb.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
416/ed8b3bd9953e58889521bbd62786a3f3b9d410b3a7f520847a422647591ccf0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
416/ed8b3bd9953e58889521bbd62786a3f3b9d410b3a7f520847a422647591ccf0a.exe
Resource
win10v2004-20220901-en
General
-
Target
416/d7175fc8f8d2c38619a6335a5f8c83de00108016aa80c8d34246be3d7afb8d6d.exe
-
Size
10KB
-
MD5
c9b2d5c36c6c0e00219c658c41f7cd46
-
SHA1
7f6b727cf8449441a4b15b4100750f5c1b9ee28d
-
SHA256
d7175fc8f8d2c38619a6335a5f8c83de00108016aa80c8d34246be3d7afb8d6d
-
SHA512
5055b818214644c8fd929d0de7e58890a05deb2071768a9ebf98ce99f92a2f522d4451de24b85afd009af941e5e526f3e8a085615ce29e539bf7a54eee912867
-
SSDEEP
192:mrxrZIMD7rZARRtIaTaVsTiIn5Yh4Og3a0npS7Vk:YN7rsRtIc9TiIn5A2aypSh
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
d7175fc8f8d2c38619a6335a5f8c83de00108016aa80c8d34246be3d7afb8d6d.exedescription pid process Token: SeDebugPrivilege 848 d7175fc8f8d2c38619a6335a5f8c83de00108016aa80c8d34246be3d7afb8d6d.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/848-132-0x0000000000640000-0x0000000000648000-memory.dmpFilesize
32KB