77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1

Analysis

max time kernel
181s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
26/11/2022, 22:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
Size

792KB
MD5

5ef113054b466d6d7cf24bb238f508ee
SHA1

7740339cd885e91f28c9777e3527cf7be2371c51
SHA256

77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1
SHA512

7ac3474fc102d016b52387a5214620a9f9315283c19392d13986a86b7d563a34cb95152af137b1bc78899db03e3d1129ae4e76f02f237d7a8979b545b7b5bba0
SSDEEP

12288:inmIbilD/Vq3LErjgu8aO8dHIECujSNmP6GdBQzPuCIsyF7+:ubilrVq3E/8aOkIUjSNmyGdBQzPuCIM

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 27 IoCs

pid	Process
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1596	77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe

C:\Users\Admin\AppData\Local\Temp\77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe
"C:\Users\Admin\AppData\Local\Temp\77a9ec482426af8d0e5524944664de997f32aa86ba1ff24e61320e277b3442b1.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1596-54-0x00000000767D1000-0x00000000767D3000-memory.dmp

Filesize
8KB

Download
memory/1596-55-0x0000000074F50000-0x00000000754FB000-memory.dmp

Filesize
5.7MB

Download
memory/1596-56-0x0000000074F50000-0x00000000754FB000-memory.dmp

Filesize
5.7MB

Download