Analysis

  • max time kernel
    166s
  • max time network
    197s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 16:28

General

  • Target

    2a7db765bbe82cd63bcf631a45ab512ba0d328f38e9a9e63f0087ddf18c4da2e.exe

  • Size

    1.0MB

  • MD5

    f84daf0757f514a74b11b5e5044db60f

  • SHA1

    bccb4530d0e58a006417eae91757aa423ccc4335

  • SHA256

    2a7db765bbe82cd63bcf631a45ab512ba0d328f38e9a9e63f0087ddf18c4da2e

  • SHA512

    39abe4acb2b4a5713863c3056e885dd840fdea0b7c1a63c958ce9bcee9b5efeeeba9a20f69ebaf72d020f1fae33858a311e9cd29020ed4e8906b43d4f510305e

  • SSDEEP

    24576:aLrW66AOe7Juq0MihmYXezBR6x9R7s9lba:au6vtuqCmYudcx0ba

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a7db765bbe82cd63bcf631a45ab512ba0d328f38e9a9e63f0087ddf18c4da2e.exe
    "C:\Users\Admin\AppData\Local\Temp\2a7db765bbe82cd63bcf631a45ab512ba0d328f38e9a9e63f0087ddf18c4da2e.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:816

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/816-132-0x0000000000160000-0x0000000000272000-memory.dmp

          Filesize

          1.1MB

        • memory/816-133-0x0000000005130000-0x00000000056D4000-memory.dmp

          Filesize

          5.6MB

        • memory/816-134-0x0000000000A70000-0x0000000000B02000-memory.dmp

          Filesize

          584KB

        • memory/816-135-0x0000000000A50000-0x0000000000A5A000-memory.dmp

          Filesize

          40KB