Overview

overview

1

Static

static

b899c45ea1...bc.exe

windows7-x64

1

b899c45ea1...bc.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    70s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 13:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b899c45ea1e76a471468222a6faaa1dff2603147de6f743f3ce37065349fafbc.exe

  • Size

    489KB

  • MD5

    db9c13d15dad4f963f3fe87b51f7bcc5

  • SHA1

    b4c5fd922b9d9e614d705b236a52386e782ee0ac

  • SHA256

    b899c45ea1e76a471468222a6faaa1dff2603147de6f743f3ce37065349fafbc

  • SHA512

    1e06722acac4143a82d5479de0ddfeb28f56618f7693f84a504491a95f46143131daff9493cefc4e1a7c378d9364fdc038789d58c015bef65f6c4d3a7a126f1b

  • SSDEEP

    6144:nH6CLBnwZ2/bUSZR2EF5pi7p767P14wQr0tIvoSHAmEF1wUQjf8XFq2:ao/bUaR2Ex6pW7P1qQavl03r0WFq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b899c45ea1e76a471468222a6faaa1dff2603147de6f743f3ce37065349fafbc.exe
    "C:\Users\Admin\AppData\Local\Temp\b899c45ea1e76a471468222a6faaa1dff2603147de6f743f3ce37065349fafbc.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4564-132-0x0000000000020000-0x00000000000A0000-memory.dmp

    Filesize

    512KB

    Download