43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a

Analysis

max time kernel
33s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27/11/2022, 15:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe
Size

1.6MB
MD5

e640920e93eabc11e5776f4ae161a726
SHA1

9c4327a97c12866ae74b5d2de702b83758d3a9d5
SHA256

43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a
SHA512

7abeeb9bba409c5423785bf38aef639592570277f6858724e7d599b46df2f7336954be23e0130f10d70afd5908ba255fd16d22650de87d47a209f807b34bbb20
SSDEEP

49152:jkTgRMzNhehFTVIRUaU4rru4urrbmyrDPnPHM:jpexhehFTVIZrSvLDPPHM

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1500	43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1500 wrote to memory of 1224	1500	43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe	27
PID 1500 wrote to memory of 1224	1500	43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe	27
PID 1500 wrote to memory of 1224	1500	43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe	27
PID 1500 wrote to memory of 1224	1500	43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe	27

C:\Users\Admin\AppData\Local\Temp\43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe
"C:\Users\Admin\AppData\Local\Temp\43bb46dd370df5a2519fe269ce52033c25d790e02f2f3387baeb1a23e1e4c58a.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1500
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 520
  2⤵
  PID:1224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1500-54-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-57-0x0000000076201000-0x0000000076203000-memory.dmp

Filesize
8KB

Download
memory/1500-58-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-59-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-60-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-61-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-62-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-63-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-65-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-66-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-64-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-67-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-68-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-69-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-70-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-71-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-72-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-73-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-74-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-75-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-76-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-77-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-78-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-79-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-80-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-82-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-81-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-83-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-84-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-85-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-86-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-87-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-88-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-89-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-90-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-91-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-92-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-93-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-94-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-95-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-96-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-97-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-98-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-99-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-100-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-101-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-102-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-103-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-104-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-105-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-106-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-107-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-108-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-109-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-110-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-111-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-112-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-113-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-114-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-115-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-116-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-117-0x0000000000B30000-0x0000000000CCC000-memory.dmp

Filesize
1.6MB

Download
memory/1500-674-0x0000000074350000-0x00000000748FB000-memory.dmp

Filesize
5.7MB

Download
memory/1500-728-0x0000000074350000-0x00000000748FB000-memory.dmp

Filesize
5.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads