Analysis
-
max time kernel
101s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 12:39
Static task
static1
Behavioral task
behavioral1
Sample
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe
Resource
win10v2004-20220812-en
General
-
Target
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe
-
Size
301KB
-
MD5
c7d172509750dfd3cdc7ec77b3df1f53
-
SHA1
b3728d48dbefecff4ef1fb027b9fc58ab9294424
-
SHA256
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303
-
SHA512
9f58ad28674d525ef1d33799e0df32d006db3916e691330026cb8ac21cc68debabc967fc927d2f7ca938c22c6dbbe21597902a7c335f1b81df85c096dd975096
-
SSDEEP
6144:TbsuQBfhfqt9g4ojrlF5BfS0TgrjZb6LrpiBc2mfJl/0cdvB2:TA3/BfVTUp6LrpiB8Nj/
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 17 IoCs
Processes:
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exedescription pid process Token: SeDebugPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1184-54-0x0000000074BB1000-0x0000000074BB3000-memory.dmpFilesize
8KB
-
memory/1184-55-0x0000000074300000-0x00000000748AB000-memory.dmpFilesize
5.7MB
-
memory/1184-56-0x0000000074300000-0x00000000748AB000-memory.dmpFilesize
5.7MB
-
memory/1184-57-0x0000000001ED6000-0x0000000001EE7000-memory.dmpFilesize
68KB