Analysis

  • max time kernel
    158s
  • max time network
    169s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 14:40

General

  • Target

    CMP_INSUM1056.exe

  • Size

    500.1MB

  • MD5

    acd01714e3836d6f49c34d103bcead06

  • SHA1

    ecc28c1eff2e37edfed50127b3bcc8237d4001c7

  • SHA256

    8d6bd51ded882f8ada6aad7dbcd38e0a6c01b8f2914ccfea4f836d4d030dcf64

  • SHA512

    dd09f10ec1b5f130e99a2984c32d6a99e121368952b09e9ca38fd3d11f323dc1690099eecfb1c2a79e1b74de64f006977a4bf4842b27435f58960ddc7b33a5ad

  • SSDEEP

    1536:rOs6A5IscDvkc0yjPSKFFneIIpsbbPOalcS/MNObZP:rOs6dDl/IpsbbPOalOwZP

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CMP_INSUM1056.exe
    "C:\Users\Admin\AppData\Local\Temp\CMP_INSUM1056.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1100-54-0x0000000000D50000-0x0000000000D74000-memory.dmp
    Filesize

    144KB

  • memory/1100-55-0x0000000075AC1000-0x0000000075AC3000-memory.dmp
    Filesize

    8KB