Overview

overview

10

Static

static

10

5cf52d0f65...ea.exe

windows7-x64

1

5cf52d0f65...ea.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    14-11-2022 20:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5cf52d0f65676fb0e0e5a9d8942fae0c487effd28c781cb7cf4a7dc2b2646bea.exe

  • Size

    1.0MB

  • MD5

    b571e1d5de6b7fbd526644e43b0c7aba

  • SHA1

    82a432ef55a7403f6c2ee2978b73ff3953a598af

  • SHA256

    5cf52d0f65676fb0e0e5a9d8942fae0c487effd28c781cb7cf4a7dc2b2646bea

  • SHA512

    31dbb47bbb137b2c2fd2299f42869391d5713f0d92c88c839f52958978957038ccab9b74f6ce4c02d4f711c320926af0bdba472b08d85360671530c517fd92d3

  • SSDEEP

    24576:n0BzKGHF0bxTCFvXwKF/aISpu4Qc6F3v1HT2BzN2tgGS3YzYhouMC0KN:n0V4xTC4u4Qc6/F8hMFKN

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5cf52d0f65676fb0e0e5a9d8942fae0c487effd28c781cb7cf4a7dc2b2646bea.exe
    "C:\Users\Admin\AppData\Local\Temp\5cf52d0f65676fb0e0e5a9d8942fae0c487effd28c781cb7cf4a7dc2b2646bea.exe"
    1⤵
      PID:1112
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:688
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x514
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1988

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/688-54-0x000007FEFB801000-0x000007FEFB803000-memory.dmp

        Filesize

        8KB

        Download