Analysis

  • max time kernel
    41s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 17:08

General

  • Target

    59bfed19537315f22b04a28a9b6729019ff58f42747e5f70ec549ca3c6077f7a.exe

  • Size

    2.9MB

  • MD5

    529a2fb135ddc73da1f302131397e419

  • SHA1

    0c85734cac434841de75254f6b9315401be90527

  • SHA256

    59bfed19537315f22b04a28a9b6729019ff58f42747e5f70ec549ca3c6077f7a

  • SHA512

    717e817ac48e14b9943c4d7a2d164ceec61ef9e4ca8afc7631133cf0ea618476605e5cf4dfec0f07590fe85357f895846c01830aa54d27e035f0f063aa5f27a8

  • SSDEEP

    49152:pJ63sOGPjQWWyG8mS6JhhnQVOM0f6ysS7R78UAZfL2OUhkU5vhFo3f8x:ps3PGYCOM0f66RAUVkAw8x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\59bfed19537315f22b04a28a9b6729019ff58f42747e5f70ec549ca3c6077f7a.exe
    "C:\Users\Admin\AppData\Local\Temp\59bfed19537315f22b04a28a9b6729019ff58f42747e5f70ec549ca3c6077f7a.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1736-54-0x0000000075DA1000-0x0000000075DA3000-memory.dmp

    Filesize

    8KB

  • memory/1736-55-0x0000000000400000-0x0000000000402000-memory.dmp

    Filesize

    8KB

  • memory/1736-56-0x0000000000400000-0x0000000000580000-memory.dmp

    Filesize

    1.5MB

  • memory/1736-57-0x0000000000400000-0x000000000053C000-memory.dmp

    Filesize

    1.2MB

  • memory/1736-58-0x0000000010000000-0x00000000100A5000-memory.dmp

    Filesize

    660KB

  • memory/1736-62-0x0000000002440000-0x000000000244E000-memory.dmp

    Filesize

    56KB

  • memory/1736-63-0x0000000010000000-0x00000000100A5000-memory.dmp

    Filesize

    660KB

  • memory/1736-64-0x0000000004A1D000-0x0000000004A2E000-memory.dmp

    Filesize

    68KB