Analysis

  • max time kernel
    23s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    26-11-2022 23:46

General

  • Target

    5c99050c1af342806ef9acbbe2ca8c3aa514e636ffe3d8f769f163acd1b60e5e.exe

  • Size

    973KB

  • MD5

    92075acf8b7875a54f428169b59b5ea0

  • SHA1

    291d086bd0b2cff3711377ee70972ee2f98180bc

  • SHA256

    5c99050c1af342806ef9acbbe2ca8c3aa514e636ffe3d8f769f163acd1b60e5e

  • SHA512

    bfb1d31b1a7e4c597091834cf19a8e551902160f7626a7d68bf400aa04eb1008fca9aa86f36a5e9ab71de1fffd0053c715e0a541208f8f289d682ab9e2477c52

  • SSDEEP

    24576:M7j2TWhEkMn82bT2wFg2afPMNuny/Vu970NNBs:yROXnNxFjasQ8VXZs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5c99050c1af342806ef9acbbe2ca8c3aa514e636ffe3d8f769f163acd1b60e5e.exe
    "C:\Users\Admin\AppData\Local\Temp\5c99050c1af342806ef9acbbe2ca8c3aa514e636ffe3d8f769f163acd1b60e5e.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/872-54-0x0000000075B41000-0x0000000075B43000-memory.dmp

    Filesize

    8KB

  • memory/872-55-0x0000000074AA0000-0x000000007504B000-memory.dmp

    Filesize

    5.7MB

  • memory/872-56-0x0000000074AA0000-0x000000007504B000-memory.dmp

    Filesize

    5.7MB